Cybersecurity Assessment & NIST SP 800-171 Compliance Implementation

The contract involves conducting thorough cybersecurity assessments and implementing the NIST SP 800-171 security controls specifically tailored for systems that handle Controlled Unclassified Information (CUI). The goal is to ensure full compliance with established cybersecurity standards and to document these efforts comprehensively. Upon completion, the results must be submitted to the Supplier Performance Risk System (SPRS) to achieve a compliance score of 110, demonstrating stringent adherence to security requirements. This subcontract, posted on May 12, 2026, with a response deadline of May 18, 2026, falls under the NAICS code 541611, which covers administrative management and general management consulting services. It is issued by the Department of Defense's Medical Supply Chain MD SURG FSF office, with the place of performance listed as APO, zip code 09227-0000. This engagement focuses on enhancing the cybersecurity posture of defense-related supply chain systems through evaluation, control implementation, and compliance certification.