Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires the implementation of NIST SP 800-171 Rev 1 security controls to protect Controlled Unclassified Information across systems handling sensitive defense-related data. This involves developing a comprehensive System Security Plan that documents how each required control is addressed, ensuring alignment with federal cybersecurity standards for non-federal systems. The contractor must also complete and submit a Supplier Performance Risk System assessment to demonstrate compliance posture and readiness to safeguard CUI. Ongoing support for corrective actions is mandatory to resolve any identified deficiencies, maintain continuous compliance, and respond to evolving security requirements. The work is part of a subcontract under the Department of Defense’s Medical Supply Chain initiative, with a focus on ensuring robust cyber defenses within the defense industrial base. The solicitation was posted on April 30, 2026, and responses are due by May 6, 2026, under NAICS code 541512 for computer systems design services.