Cybersecurity Compliance Assessment and Reporting

This contract involves performing cybersecurity compliance assessments for defense contractors in accordance with NIST SP 800-171 standards, focusing on evaluating System Security Plans, assigning compliance scores, and submitting results to the Supplier Performance Risk System. The work requires a thorough review of contractor security controls, identification of deficiencies, and development of detailed Plans of Action and Milestones to remediate gaps and achieve full compliance. The assessment activities must be conducted with precision and aligned with Department of Defense requirements, ensuring all findings are accurately documented and reported through official channels. The task is scheduled as a subcontract under the NAICS code 541611, with performance centered at Fort Bliss, Texas, 79916-2527. The solicitation was posted on April 29, 2026, and responses are due by May 5, 2026. Although the contracting agency is listed as the Medical Supply Chain MD Surg FSF, the overarching organization is the Department of Defense, indicating this effort supports broader defense cybersecurity initiatives. The project demands expertise in federal cybersecurity frameworks and experience with SPRS submission protocols, requiring the contractor to deliver timely, accurate, and actionable compliance insights to ensure defense industry partners meet mandatory security standards.