Cybersecurity Compliance and SPRS Reporting Support

The contract seeks support for achieving and maintaining NIST SP 800-171 compliance in environments that process, store, or transmit Controlled Unclassified Information. This includes conducting comprehensive system assessments to identify gaps in security controls, developing and updating required documentation such as System Security Plans and Plans of Action and Milestones, and ensuring accurate and timely submission of compliance data through the Supplier Performance Risk System. The work is critical for meeting federal cybersecurity standards and sustaining authorized handling of CUI within a Department of Defense context. The effort is structured as a subcontract under the Medical Supply Chain MD Surg FSF, with performance centered in Virginia Beach, Virginia. The solicitation, identified by the reference SPE2DS26T032C, falls under NAICS code 541512 for Computer Systems Design Services and is open for responses until May 5, 2026. Contractors must demonstrate expertise in federal cybersecurity frameworks, particularly NIST 800-171 requirements, and have established processes for documentation, assessment, and SPRS reporting. Timely and accurate compliance activities are essential to ensure the organization’s continued eligibility to handle sensitive government information.