Cybersecurity Compliance Assessment & Reporting

This contract involves conducting a comprehensive NIST SP 800-171 compliance assessment for IT systems that handle Controlled Unclassified Information (CUI). The contractor is required to develop a detailed System Security Plan (SSP) reflecting the current security posture and adherence to the required cybersecurity standards. Following the assessment and preparation of the SSP, the contractor must submit the compliance score to the Department of Defense’s Supplier Performance Risk System (SPRS). The contract, titled "Cybersecurity Compliance Assessment & Reporting," is a subcontract opportunity posted on May 11, 2026, with a response deadline of May 18, 2026. It falls under the NAICS code 541618, which pertains to other management consulting services, and is issued by the Medical Supply Chain MD Surg FSF office within the Department of Defense. The place of performance is designated as FPO with the ZIP code 96678, indicating a military postal address. This effort supports the Department of Defense’s mandate to ensure all contractors handling sensitive government information meet stringent cybersecurity requirements.