Cybersecurity Compliance & Reporting (NIST SP 800-171)

This contract involves the implementation and thorough documentation of cybersecurity measures in line with NIST SP 800-171 standards, specifically targeting the protection of Controlled Unclassified Information (CUI). The scope includes the development of a comprehensive System Security Plan (SSP) and a detailed Plan of Action and Milestones (POA&M), ensuring that all required security controls are properly addressed and tracked. Additionally, the contract requires reporting through the Supplier Performance Risk System (SPRS) to maintain compliance and transparency throughout the process. The contract, identified as a subcontract opportunity under NAICS code 541512, is issued by the Department of Defense through the Medical Supply Chain MD SURG FSF agency. The work is to be performed in Groton, with the solicitation posted on May 11, 2026, and a response deadline set for May 18, 2026. This opportunity aims to support the Defense Department’s efforts in safeguarding sensitive information within its supply chain by ensuring that vendors meet stringent cybersecurity requirements.