Cybersecurity for Covered Contractor Information Systems

This contract requires the implementation of NIST SP 800-171 controls to protect covered defense information on contractor information systems, in alignment with DFARS 52.240-93 requirements. The work focuses specifically on access control and media protection measures to ensure the confidentiality, integrity, and availability of sensitive defense data handled by the contractor. The effort is scoped to secure information systems that process, store, or transmit covered defense information and must comply with all technical and procedural standards outlined in the NIST framework. The contract is classified as a subcontract under NAICS code 541512 and is managed by the Department of Defense through the Medical Supply Chain MD Surg FSF office. Performance is required at a designated location in San Antonio, Texas, with a zip code of 78226. Proposals must be submitted by the stated deadline of August 17, 2026, following the solicitation posted on August 9, 2026. All work must be completed in accordance with federal cybersecurity mandates, and contractors are expected to demonstrate robust controls for user authentication, physical and logical access management, and secure handling of storage media to prevent unauthorized access or data leakage.