Cybersecurity Compliance & SPRS Reporting

The contract requires performance of a NIST SP 800-171 cybersecurity assessment to evaluate compliance with federal security standards for protecting controlled unclassified information. Following the assessment, all necessary security controls must be implemented to meet the full requirements of the framework, ensuring the contractor's systems are properly hardened against identified vulnerabilities. The final step involves submitting the completed assessment results to the Supplier Performance Risk System, which is mandatory for compliance with applicable DFARS clauses governing cybersecurity in the defense supply chain. The effort is governed as a subcontract under NAICS code 541612 and is tied to the Department of Defense Medical Supply Chain MD Surg FSF, with performance expected to occur at the FPO location identified by ZIP code 96671-4077. All work must be completed and reported prior to the response deadline of May 19, 2026.