Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to ensure compliance with Department of Defense standards. All covered systems must be configured to meet the specified security requirements, and any cyber incident must be reported within 72 hours of discovery. Assessment results documenting compliance with these controls must be submitted through the Supplier Performance and Assessment Reporting System to demonstrate adherence to contractual obligations. The work is tied to a subcontract under the Medical Supply Chain MD Surg FSF and is performance-bound to San Antonio, Texas, with a ZIP code of 78226. The solicitation opens on July 30, 2026, and responses are due by August 5, 2026, under NAICS code 541611 for management consulting services, indicating the scope involves advisory and implementation support for cybersecurity compliance rather than hardware or infrastructure procurement.