Cybersecurity Compliance and NIST SP 800-171 Assessment

This contract focuses on ensuring compliance with the NIST SP 800-171 standards to protect covered defense information. The scope includes developing a system security plan, conducting assessments to evaluate cybersecurity measures, and performing Supplier Performance Risk System (SPRS) reporting. It is categorized as a subcontract under NAICS code 541611, which pertains to administrative management and general management consulting services. The contracting agency is the Department of Defense, specifically through the Medical Supply Chain MD SURG FSF office, with work to be performed at APO, ZIP code 09227-0000. The solicitation was posted on May 10, 2026, with a response deadline set for May 18, 2026. While there is no indication of a set-aside type or specific organization type required, the contract’s purpose is to ensure contractors meet stringent cybersecurity requirements for safeguarding defense-related information. This effort is critical for maintaining compliance and supporting secure defense supply chain operations. Further details and submission instructions are accessible through the designated online portal.