Cybersecurity Compliance & Reporting Support

The contract seeks support for the development and submission of a System Security Plan aligned with NIST SP 800-171 Rev 1 to ensure proper protection of Controlled Unclassified Information. The work involves documenting all required security controls, conducting assessments to verify implementation, and reporting the resulting scores through the Supplier Performance Risk System to demonstrate compliance. The focus is on establishing a robust cybersecurity framework that meets federal standards for safeguarding sensitive data within a defense-related supply chain environment. This subcontract is under the Department of Defense, specifically managed by the Medical Supply Chain FSH, with performance expected at the FPO address with ZIP code 96662. The NAICS code 541512 indicates the work falls under computer systems design and related services. The solicitation was posted on May 12, 2026, with a firm response deadline of May 18, 2026. All activities must be completed within this timeframe to meet compliance obligations tied to the protection of CUI, and timely, accurate reporting via SPRS is critical for contract fulfillment.