Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation of NIST SP 800-171 security controls to safeguard covered defense information across all systems and processes, ensuring compliance with the mandatory cybersecurity requirements outlined in DFARS 252.204-7012. This includes establishing robust access controls, data encryption, audit logging, malware protection, and configuration management procedures tailored to protect sensitive unclassified information related to defense contracts. The contractor must also be capable of detecting, reporting, and responding to cyber incidents in accordance with the specified timelines and protocols under the DFARS clause, with all activities conducted at the designated performance location in Fort Rucker, Georgia. This is a subcontract under the Department of Defense, classified under NAICS code 541512 for computer systems design services, with a response deadline of July 22, 2026. The solicitation is not subject to any set-aside preference and is part of Medical Supply Chain MD Surg FSF’s broader effort to enforce cybersecurity standards across its supplier base. All compliance measures must be operational and documented prior to contract execution, with no allowance for partial or delayed implementation of the required controls. Failure to meet these obligations may result in contract termination or financial penalties under applicable federal regulations.