Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the performance of a cybersecurity compliance assessment aligned with NIST Special Publication 800-171 for information systems under the jurisdiction of the Department of Defense, specifically managed by the Medical Supply Chain FSH. The assessment must evaluate the implementation of security controls as defined by the NIST framework and document the findings through a structured methodology that ensures accuracy and repeatability. The results of the assessment, including overall summary scores and detailed methodologies used, must be submitted to the Supplier Performance Risk System (SPRS) to ensure compliance visibility across the defense supply chain. The work is scoped as a subcontract with a specified place of performance in San Antonio, Texas, 78226, and is categorized under NAICS code 541512 for computer systems design services. The solicitation was posted on April 30, 2026, with a firm response deadline of May 7, 2026, leaving a narrow window for proposers to submit viable and compliant responses. The nature of the engagement demands technical expertise in federal cybersecurity standards and familiarity with SPRS reporting requirements, as failure to meet documentation or submission standards could impact the contractor’s eligibility and the broader compliance posture of the DoD supply chain.