Cybersecurity Control Implementation and System Hardening

The contract entails the implementation of technical and administrative security controls aligned with NIST SP 800-171 across information systems operated under the Department of Defense, specifically for the Medical Supply Chain FSH at Camp Pendleton, CA. The work involves establishing and hardening systems with robust access controls, data encryption, comprehensive audit logging, and standardized incident response protocols to ensure compliance with federal cybersecurity requirements for protecting controlled unclassified information. All systems must be configured to meet rigorous standards for confidentiality, integrity, and availability, with a focus on mitigating vulnerabilities and maintaining ongoing compliance through continuous monitoring and documentation. This is a subcontract opportunity with a response deadline of May 6, 2026, and is classified under NAICS code 541512 for computer systems design services. The performance location is firmly set at Camp Pendleton with a zip code of 92055-5677, and all work must be executed in compliance with DoD directives. While no set-aside details are provided, the requirement is structured to ensure qualified subcontractors deliver secure, auditable, and resilient infrastructure capable of supporting sensitive military medical supply chain operations. The solicitation is accessible via the DIBBS platform, and potential bidders must align their technical approach with the full scope of NIST 800-171 controls without deviation.