Cybersecurity for Controlled Unclassified Information (CUI)

This contract involves the implementation of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information (CUI) within contractor systems. Key tasks include the development of a System Security Plan (SSP) and reporting through the Supplier Performance Risk System (SPRS), ensuring compliance with federal cybersecurity requirements. The contract is a subcontract opportunity with a focus on information technology services, categorized under NAICS code 541512. Issued by the Department of Defense through the Medical Supply Chain MD SURG FSF office, the work will be performed at Joint Base Charleston, zip code 29404. The solicitation was posted on May 14, 2026, with responses due by May 20, 2026. While some standard details like specific agency office addresses and points of contact are not provided, the contract emphasizes the critical nature of protecting sensitive but unclassified information in defense supply chain operations. Interested parties can access the solicitation and related documents via the provided DIBBS website link.