Cybersecurity Compliance & SPRS Reporting

The contract requires full implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information across all systems and processes, ensuring alignment with federal cybersecurity standards. A comprehensive System Security Plan must be developed to document the implementation, management, and ongoing maintenance of these controls, with regular assessments conducted to validate compliance and identify gaps. All assessment results must be accurately recorded and submitted to the Supplier Performance Risk System to meet federal reporting obligations under DFARS 252.204-7012, with scores reflecting the organization’s cybersecurity posture. The work is scoped as a subcontract under the Department of Defense, specifically for the Medical Supply Chain MD Surg FSF, with performance centered in San Diego, California, 92135-7096. All activities must be completed within the response window, with submissions due by May 6, 2026, and the effort is classified under NAICS code 541512 for Computer Systems Design Services. The requirement demands rigorous attention to detail, continuous compliance monitoring, and timely documentation to satisfy federal cybersecurity mandates and maintain eligibility for future DoD contracting opportunities.