Medical Device Cybersecurity and CUI Compliance

The contract involves the implementation and ongoing maintenance of cybersecurity controls specifically designed for systems managing Controlled Unclassified Information (CUI) associated with the production and delivery of medical devices. Key compliance requirements include adherence to NIST SP 800-171 standards to protect sensitive information and compliance with Defense Federal Acquisition Regulation Supplement (DFARS) incident reporting protocols. The focus is on ensuring robust cybersecurity measures to safeguard the integrity and confidentiality of medical device-related data in line with Department of Defense regulations. This subcontract, issued by the Department of Defense under the Medical Supply Chain MD Surg FSF agency, is identified by NAICS code 541512, which pertains to computer systems design services. The place of performance is located in Bell, California, with a zip code of 90201-6408. The solicitation was posted on May 31, 2026, with a response deadline of June 8, 2026. Although the contract does not specify a set-aside type or organization type, it remains vital for contractors to meet the cybersecurity requirements and incident reporting standards mandated by federal guidelines in this highly regulated field.