Cybersecurity Compliance and Reporting (NIST SP 800-171)

This contract involves the implementation and ongoing maintenance of cybersecurity controls specifically designed to protect covered defense information in accordance with the NIST SP 800-171 framework. It requires the development of a System Security Plan (SSP), conducting self-assessments to ensure compliance, and submitting the Supplier Performance Risk System (SPRS) reports. The scope emphasizes managing cybersecurity measures critical to safeguarding sensitive defense data throughout the subcontract period. Issued by the Department of Defense under the Medical Supply Chain MD SURG FSF office, this subcontract opportunity falls under NAICS code 541512, which pertains to computer systems design services. The contract response deadline is set for May 26, 2026, and the place of performance is designated as FPO with a postal code of 96693. This initiative reflects the DoD’s ongoing efforts to enforce rigorous cybersecurity standards among its supply chain partners.