Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the performance of a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 standards to ensure proper safeguarding of Controlled Unclassified Information. This includes conducting a thorough evaluation of existing security controls, identifying gaps in compliance, and developing a complete System Security Plan that documents policies, procedures, and technical safeguards necessary to meet federal requirements. The deliverables must be structured to support accurate scoring through the Supplier Performance Risk System, with the final compliance score submitted via SPRS to demonstrate adherence to DoD cybersecurity mandates. This subcontract is issued under the Department of Defense, specifically by the Medical Supply Chain Pharm FSA, with performance expected to occur at FPO, ZIP 09583. The work must be completed within a narrow timeframe, with proposals due by May 19, 2026, following a posting date of May 13, 2026. The North American Industry Classification System code 541611 indicates the focus is on computer systems design and related services, emphasizing the technical and consultative nature of the engagement. The effort is critical for maintaining the integrity of CUI within the defense supply chain and requires specialized expertise in federal cybersecurity frameworks and documentation protocols.