Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires full compliance with NIST SP 800-171 to protect covered defense information, mandating the development and implementation of a comprehensive system security plan, ongoing assessment of security controls, and accurate reporting through the Supplier Performance Risk System. All activities must align with federal cybersecurity standards for safeguarding sensitive data handled under Department of Defense contracts. The work is classified as a subcontract under NAICS code 541611 and is performance-based, with the primary location of performance listed as APO, ZIP 09227-0000. The solicitation was posted on May 10, 2026, with a firm response deadline of May 18, 2026, and is issued by the Medical Supply Chain MD Surg FSF under the broader Department of Defense. Participants must demonstrate proven capability in NIST 800-171 implementation, assessment methodologies, and SPRS reporting to be eligible for award.