Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract involves conducting cybersecurity assessments aligned with the NIST SP 800-171 standards, focused on ensuring compliance with federal cybersecurity mandates and the Defense Federal Acquisition Regulation Supplement (DFARS). The contractor is required to evaluate systems and submit summary scores to the Supplier Performance Risk System (SPRS), facilitating the Department of Defense’s ability to monitor and enforce cybersecurity practices among its suppliers. The work is designated as a subcontract under NAICS code 541330, which pertains to engineering services, and is tied to the Medical Supply Chain MD SURG FSF office within the Department of Defense. The solicitation was posted on May 11, 2026, with a response deadline set for May 18, 2026. The place of performance is APO, with a ZIP code of 96260-5479, indicating operations likely related to overseas military logistics. The contract emphasizes adherence to established cybersecurity frameworks to safeguard controlled unclassified information within the defense supply chain, reflecting the DoD’s priority on maintaining robust cybersecurity measures in its procurement processes.