Cybersecurity Compliance Assessment & Reporting

The contract requires a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 standards, mandating a thorough self-evaluation of existing security controls within the system. A detailed System Security Plan must be developed and continuously maintained to document how cybersecurity requirements are implemented and managed. This includes a complete documentation of the system’s architecture, providing clear insight into how data flows, is protected, and interacts with external entities. All findings from the assessment must be formally reported to the Department of Defense’s SPRS platform to ensure transparency and regulatory alignment. The contractor is also obligated to create a remediation plan addressing any gaps or deficiencies identified during the assessment, outlining actionable steps, timelines, and responsible parties to achieve full compliance with NIST SP 800-171 requirements. This work is classified as a subcontract under NAICS code 541512 and is performed in support of the Department of Defense through the Medical Supply Chain FSH, with performance taking place at a FPO location with ZIP code 96662. Responses are due by May 18, 2026.