Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard covered defense information in strict compliance with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012. This subcontract is focused on ensuring that all systems and processes handling sensitive defense data meet federal standards for protection against unauthorized access, disclosure, and cyber threats. The work must be performed at Fort Bliss, Texas, with the full scope of activities centered on achieving and sustaining compliance through technical, administrative, and physical security measures aligned with the NIST framework. The solicitation is open for submission until July 21, 2026, and falls under the NAICS code 541512 for computer systems design services. It is issued by the Department of Defense through the Medical Supply Chain MD Surg FSF and is intended for a subcontractor to support defense-specific cybersecurity requirements. While no set-aside classification is specified, the effort requires specialized expertise in federal cybersecurity frameworks and experience in implementing controls within a defense contracting environment. The successful bidder must be prepared to demonstrate continuous compliance, documentation readiness, and the ability to respond to audit and assessment activities as part of the contract’s ongoing obligations.