Cybersecurity Compliance Support (NIST SP 800-171)

The contract requires consulting and implementation services to ensure prime contractor compliance with NIST SP 800-171 standards for protecting Controlled Unclassified Information (CUI) as mandated by DFARS 252.204-7012. The work supports cybersecurity readiness across the defense supply chain by helping the prime contractor meet federal security requirements for handling sensitive but unclassified data. Services will include assessment, gap analysis, policy development, technical implementation, and ongoing support to achieve and maintain compliance with the specified framework. The contract is issued as a subcontract under the Department of Defense, specifically through the Medical Supply Chain MD Surg FSF, with performance centered at Little Rock Air Force Base, ZIP 72099-5300. It falls under NAICS code 541611 for management consulting services and was posted on April 30, 2026, with responses due by May 6, 2026. The solicitation number is SPE2DS26T035D, and the work is not subject to any set-aside provisions. All deliverables must align with federal cybersecurity mandates and address the full scope of NIST SP 800-171 controls required for CUI protection.