Cybersecurity Compliance Assessment & Documentation

The contract requires the performance of a cybersecurity compliance assessment aligned with NIST Special Publication 800-171 to ensure adherence to Department of Defense security requirements. The scope includes developing a comprehensive System Security Plan and detailed Plans of Action and Milestones to document current security controls, identify gaps, and outline remediation efforts. All deliverables must be formatted and submitted for entry into the DoD Supplier Performance Risk System, ensuring the organization meets mandatory compliance standards for handling controlled unclassified information. The work is to be performed in San Antonio, Texas, under a subcontract arrangement tied to a Medical Supply Chain initiative within the Department of Defense. The solicitation was posted on April 29, 2026, with a strict response deadline of May 5, 2026, indicating a tight turnaround for proposals. The North American Industry Classification System code 541611 identifies this as an information technology consulting service, underscoring the need for technical expertise in cybersecurity frameworks and documentation. Successful contractors must demonstrate a clear understanding of NIST SP 800-171 controls and the ability to produce auditable, DoD-compliant documentation suitable for SPRS submission. The place of performance is fixed, and all deliverables are expected to be completed with precision to support ongoing DoD supply chain security objectives.