Cybersecurity Compliance & SPRS Reporting

This subcontract involves performing a comprehensive NIST SP 800-171 assessment to evaluate cybersecurity compliance, followed by the development of a System Security Plan (SSP) that outlines the security controls and measures implemented. The contractor is also responsible for submitting the assessment results to the Department of Defense Supplier Performance Risk System (SPRS) to ensure proper compliance tracking. The work is to be performed primarily at Camp Pendleton, with a focus on supporting the Medical Supply Chain under the Department of Defense. The contract falls under the NAICS code 541612 and aims to fulfill critical cybersecurity and reporting requirements to safeguard sensitive defense information. The solicitation was posted on May 10, 2026, with a response deadline of May 18, 2026. This subcontract opportunity is managed by the Medical Supply Chain MD SURG FSF office and provides a key role in helping the DoD maintain compliance with federal cybersecurity standards.