Cybersecurity Compliance & SPRS Reporting Support

The contract seeks support for achieving and maintaining compliance with NIST SP 800-171 standards to protect Controlled Unclassified Information (CUI) within the Department of Defense’s medical supply chain environment. The work involves conducting a comprehensive self-assessment of current cybersecurity practices, developing and updating a detailed System Security Plan (SSP), and ensuring accurate reporting through the Supplier Performance Risk System (SPRS). All activities must align with federal requirements governing the safeguarding of CUI and are intended to enable the contractor to meet Defense Federal Acquisition Regulation Supplement (DFARS) obligations. The place of performance is designated as San Antonio, Texas, with a focus on supporting the Medical Supply Chain MD Surg FSF unit. This is a subcontract opportunity with a NAICS code of 541611, indicating it falls under Computer Systems Design Services. The solicitation was posted on April 30, 2026, and responses are due by May 6, 2026, indicating a short turnaround window for qualified vendors to submit proposals. The contract is not subject to a specific set-aside category, meaning it is open to all eligible small and large businesses. The work is critical for enhancing the cybersecurity posture of a key defense logistics function, requiring deep expertise in CUI compliance, documentation rigor, and SPRS reporting procedures. Potential offerors must demonstrate proven experience with NIST 800-171 implementation, SSP development, and federal cyber compliance frameworks within defense supply chain contexts.