Cybersecurity Compliance Assessment & Reporting

The contract involves conducting a thorough cybersecurity assessment of information systems that manage Controlled Unclassified Information (CUI) in accordance with Department of Defense requirements. The work includes implementing the cybersecurity safeguards outlined in NIST Special Publication 800-171 Revision 1, which establishes standards for protecting CUI in non-federal systems. Additionally, the contractor is responsible for developing a comprehensive system security plan (SSP) to document the current cybersecurity posture and corrective measures, as well as reporting compliance status through the Supplier Performance Risk System (SPRS). This subcontract is identified under NAICS code 541611 and will be performed at Cannon Air Force Base, with all activities supporting DoD contracts. The solicitation was posted on May 13, 2026, with a response deadline set for May 19, 2026, making it a short turnaround for submitting proposals. The procurement agency is the Medical Supply Chain MD SURG FSF office under the Department of Defense. While the subcontract details do not specify a set-aside type or point of contact, interested parties can access more information via the provided Defense Internet Bid Board System (DIBBS) link. The prime focus is ensuring DoD contractors comply with cybersecurity requirements to protect sensitive information through assessment, implementation, documentation, and reporting efforts.