Cybersecurity Control Implementation & Safeguarding of Covered Defense Information

The contract requires the implementation and ongoing maintenance of technical, administrative, and physical safeguards to safeguard covered defense information in full compliance with NIST SP 800-171 standards across all contractor systems that handle controlled unclassified information. This includes establishing and enforcing cybersecurity controls designed to protect the confidentiality, integrity, and availability of sensitive data transmitted, processed, or stored within the contractor’s environment. The work must be performed in accordance with federal requirements for defense contractors handling CUI, with a focus on continuous monitoring, risk management, and adherence to documented security policies and procedures. The contract is a subcontract under the NAICS code 541512 for computer systems design services, issued by the Department of Defense through the Medical Supply Chain FSH office. Performance is located at Perry Point, Maryland, with a zip code of 21902. Proposals must be submitted by May 7, 2026, following the posting date of April 30, 2026. While no specific set-aside designation is indicated, the solicitation is accessible through the DIBBS platform under reference number SPE2DH26T3521, and bidders must demonstrate proven capability to meet all NIST 800-171 requirements with documented evidence of compliance prior to award.