Cybersecurity Assessment and SPRS Reporting

The contract involves conducting a comprehensive NIST SP 800-171 assessment for systems that handle Controlled Unclassified Information (CUI). The contractor is responsible for evaluating the cybersecurity posture of these systems, documenting compliance with the standard, and submitting the corresponding score to the Supplier Performance Risk System (SPRS) before the contract award. This task is critical for ensuring that systems meet required federal cybersecurity standards, particularly in managing sensitive information within the Department of Defense’s supply chain. The contract is categorized as a subcontract under NAICS code 541611, relating to administrative management and general management consulting services. The work is to be performed in West Bath, with a response deadline set for May 19, 2026. The requesting agency is the Medical Supply Chain MD SURG FSF under the Department of Defense. The contract ensures that potential vendors verify their cybersecurity measures and demonstrate compliance to facilitate secure handling of CUI in support of defense supply operations.