Cybersecurity Subcontract Flow-Down Compliance Management

The contract requires comprehensive management and enforcement of DFARS 252.204-7012 flow-down requirements across all subcontractors engaged in work under the Medical Supply Chain MD Surg FSF. This includes conducting regular compliance audits to ensure subcontractors implement proper cybersecurity controls for Controlled Unclassified Information, maintain accurate documentation of safeguarding measures, and adhere to all federal regulations regarding data protection and incident reporting. The contractor must also perform screening for prohibited telecommunications and video surveillance equipment as mandated by applicable laws, ensuring no covered equipment from restricted foreign entities is used in the supply chain. All activities must be executed in alignment with the place of performance at Eglin AFB, Florida, and must be completed within the narrow response window, with solicitation closing on May 6, 2026. The work falls under NAICS code 541611, indicating a focus on management consulting services related to cybersecurity compliance. The contractor is expected to operate independently to monitor, report, and remediate noncompliance across the subcontractor network, with continuous oversight to protect sensitive information and maintain DoD supply chain integrity throughout the lifecycle of the contract.