Cybersecurity Compliance & NIST SP 800-171 Assessment Support

This contract focuses on providing cybersecurity compliance services aligned with NIST SP 800-171 requirements. The contractor is expected to implement the necessary safeguards to protect controlled unclassified information, perform a Basic Assessment to evaluate the current security posture, and submit the assessment results to the Supplier Performance Risk System (SPRS). The scope also includes establishing procedures for cyber incident reporting and ensuring these requirements are flowed down to all subcontractors involved in the performance of the contract. The work will be carried out under a subcontract arrangement for the Department of Defense, specifically through the Medical Supply Chain FSH office, with the place of performance located in APO 09094-3219. The solicitation was posted on May 13, 2026, with a response deadline of May 20, 2026. The contract falls under the NAICS code 541512, indicating it involves computer systems design services. Overall, the contract ensures enhanced cybersecurity posture and compliance for the defense supply chain by mandating robust protective measures and reporting protocols consistent with federal cybersecurity standards.