Secure IT Equipment Supply with CUI/CDI Compliance

The contract is for the supply of commercial off-the-shelf IT equipment or components designed to support systems handling Controlled Unclassified Information or Covered Defense Information, with mandatory compliance to DFARS 252.204-7016 and full adherence to the security controls outlined in NIST SP 800-171. All equipment must be procured and delivered in a manner that ensures the integrity, confidentiality, and availability of CUI and CDI throughout the supply chain, from manufacturing to final deployment, with no exceptions for non-compliant hardware or software components. The successful vendor must demonstrate proven capability in securing IT products against cyber threats and provide documentation attesting to compliance with all applicable cybersecurity requirements as defined by federal defense standards. This is a subcontract under the Department of Defense, issued by the MEDICAL SUPPLY CHAIN MD SURG FSF, with a place of performance specified in San Diego, California, 92135-7076. The solicitation was posted on May 12, 2026, and responses are due by May 18, 2026. The applicable NAICS code is 334111, which classifies the procurement under Computer and Peripheral Equipment Manufacturing. There is no set-aside designation, meaning all eligible contractors may respond, and submissions must align precisely with the cybersecurity and delivery requirements outlined in the solicitation. All equipment must be traceable, tamper-evident, and accompanied by evidence of secure handling procedures from origin to final installation.