Cybersecurity Compliance Assessment and Reporting

This contract requires support to the prime contractor in achieving and maintaining compliance with DFARS 252.204-7012 and NIST SP 800-171 cybersecurity standards, focusing on the assessment, documentation, and reporting of security controls applicable to controlled unclassified information. The scope includes conducting comprehensive self-assessments, compiling accurate and audit-ready documentation of implemented safeguards, and submitting required evaluations through the Supplier Performance Risk System. Performance is tied to safeguarding sensitive defense information within the contractor’s systems and ensuring all compliance activities meet federal mandates. The work is to be performed at Oak Harbor, Washington, with a response deadline of May 18, 2026, under a subcontract arrangement governed by NAICS code 541611. The contracting entity is the Department of Defense, specifically under the Medical Supply Chain FSH, indicating the context involves secure handling of medical supply chain data.