Cybersecurity Control Implementation & System Hardening

The contract requires the implementation of technical and administrative security controls aligned with NIST SP 800-171 to safeguard controlled unclassified information within systems supporting the Department of Defense. Key tasks include hardening system configurations, enforcing strict access controls, applying encryption standards for data at rest and in transit, and establishing a robust incident response plan to detect, respond to, and recover from cyber threats. All work must be performed at the specified location in San Antonio, Texas, with a focus on ensuring compliance with federal cybersecurity requirements for defense-related operations. This subcontract, posted on April 30, 2026, has a response deadline of May 6, 2026, and falls under NAICS code 541512 for computer systems design services. The effort is directed by the Medical Supply Chain MD Surg FSF under the broader oversight of the Department of Defense, emphasizing the critical nature of securing sensitive medical supply chain data. While no set-aside classification or point of contact is provided, bidders must be prepared to demonstrate proven experience in NIST 800-171 implementation, system hardening, and defense contract compliance to meet the anticipated requirements.