Cybersecurity Compliance and Reporting (NIST SP 800-171)

This contract involves subcontracting work focused on ensuring compliance with the NIST SP 800-171 cybersecurity standards, specifically targeting the protection and handling of Controlled Unclassified Information (CUI). The scope includes the implementation of required security controls, the development of a detailed System Security Plan (SSP), and assistance with Supplier Performance Risk System (SPRS) scoring to demonstrate compliance. The contract is associated with the Department of Defense's Medical Supply Chain Pharmacy Field Support Activity and is set to be performed primarily at Fort Stewart. Key dates include the contract posting on May 10, 2026, with a response deadline of May 18, 2026. The contract falls under NAICS code 541512, which pertains to computer systems design services. This opportunity is structured as a subcontract, and while specific details about set-aside status or organization type were not provided, the focus remains on supporting DoD efforts to enhance cybersecurity posture in handling sensitive information within the medical supply chain sector.