Cybersecurity for Covered Contractor Information Systems

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard unclassified controlled technical information on covered contractor information systems, fully aligned with the standards outlined in NIST SP 800-171. This subcontract is focused on ensuring robust protection of sensitive technical data processed, stored, or transmitted by the contractor, with compliance being mandatory throughout the performance period. The work is to be performed at Fort Bliss, Texas, 79918, and must meet all applicable federal requirements for securing controlled unclassified information within defense-related systems. The solicitation is issued under the NAICS code 541512 for Computer Systems Design Services and is managed by the Department of Defense through the Medical Supply Chain FSH office. The response deadline is July 27, 2026, with the solicitation posted on July 20, 2026, indicating a brief seven-day window for submissions. While no set-aside classification is specified, the contract is structured as a subcontract, suggesting it may be part of a larger prime contract supporting defense infrastructure. All proposals must demonstrate clear capabilities to deploy, monitor, and sustain NIST SP 800-171 controls, including access control, audit and accountability, configuration management, and incident response, to ensure continuous compliance and protection of UCTI.