Cybersecurity Compliance and NIST SP 800-171 Implementation

The contract involves implementing NIST SP 800-171 security controls to ensure compliance with federal cybersecurity requirements for handling Controlled Unclassified Information (CUI) in accordance with DFARS clauses 252.204-7012 and 252.204-7020. The scope includes completing a Basic Assessment of these controls and submitting the results to the Supplier Performance Risk System (SPRS). This work addresses critical cybersecurity standards to maintain data protection within the Department of Defense supply chain. Scheduled as a subcontract under NAICS code 541512, the contract is managed by the Medical Supply Chain MD SURG FSF office of the Department of Defense. The place of performance is identified as FPO with zip code 96671-4077. Responses to this solicitation must be submitted by May 19, 2026, following its posting on May 13, 2026. The contract is geared towards vendors capable of ensuring rigorous cybersecurity compliance in support of DoD operations.