Cybersecurity Compliance & Reporting (NIST SP 800-171)

The contract requires the implementation and documentation of NIST SP 800-171 security controls to protect Controlled Unclassified Information within the designated environment. This includes the development of a comprehensive System Security Plan and a detailed Plan of Action and Milestones to address gaps and remediate vulnerabilities. Ongoing reporting through the Supplier Performance Risk System is mandatory to ensure continuous compliance and transparency in CUI protection efforts. All activities must align with federal cybersecurity standards and be executed in accordance with the specified performance location in Groton, Connecticut. This subcontract is issued under NAICS code 541512 and is part of a Department of Defense initiative managed by the Medical Supply Chain MD Surg FSF. The solicitation was posted on May 11, 2026, with a firm response deadline of May 18, 2026. The work is subject to strict contractual timelines and technical requirements focused on achieving and maintaining NIST 800-171 compliance, with all documentation and reporting obligations to be fulfilled in full before any deliverables are considered accepted.