Regulatory and Cybersecurity Compliance Support

This contract provides support for safeguarding covered defense information, ensuring compliance with cyber incident reporting requirements, and preparing for an assessment under NIST SP 800-171 as mandated by DFARS clauses. The work focuses on implementing and validating security controls to protect sensitive government data, establishing processes for timely reporting of cybersecurity incidents, and aligning organizational practices with federal regulatory standards. The effort is critical for maintaining compliance within the Department of Defense supply chain and ensuring readiness for formal NIST assessment procedures. The subcontract is issued under the NAICS code 541611 for management consulting services and is associated with the Medical Supply Chain MD Surg FSF under the Department of Defense. Performance is required to take place in El Paso, Texas, with a response deadline of August 3, 2026, and the solicitation was posted on July 26, 2026. All activities must meet strict regulatory obligations tied to the protection of controlled unclassified information and must be executed in alignment with DoD cybersecurity frameworks. The contract does not specify a set-aside type, indicating it is open to general competition among qualified contractors.