Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contract requires full implementation of NIST Special Publication 800-171 cybersecurity safeguards to protect controlled unclassified information within the federal supply chain. The performance includes conducting a Basic Assessment to evaluate compliance with all required security controls, documenting the findings, and submitting the assessment results to the System for Award Management’s Supplier Performance Risk System. Cyber incident reporting procedures must be established and actively maintained to ensure timely notification of any security breaches affecting covered systems. Additionally, the contractor must flow down all applicable cybersecurity requirements to any subcontractors involved in the performance of this work, ensuring consistent compliance across the entire contractual chain. The work is tied to a Department of Defense initiative under the Medical Supply Chain FSH, with performance expected to occur at APO 09094-3219, and responses are due by May 20, 2026.