Cybersecurity Compliance and SPRS Reporting Support

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within systems operated under the Department of Defense. This involves developing comprehensive system security plans that document control execution and ongoing compliance measures, ensuring alignment with federal cybersecurity standards for CUI protection. Submissions must include an accurate SPRS score reflecting the organization’s current posture under the Supplier Performance Risk System, demonstrating readiness and adherence to mandated security requirements. The work is scoped as a subcontract under the Medical Supply Chain MD Surg FSF, with performance centered in Johnston, Iowa, 50131. The solicitation, categorized under NAICS code 541512 for computer systems design services, has a response deadline of May 19, 2026, with posting dated May 13, 2026. All deliverables must meet federal compliance benchmarks, and the contractor is expected to provide continuous documentation and reporting to validate control effectiveness and maintain regulatory standing throughout the engagement period.