Cybersecurity Compliance Assessment & Reporting

The contract requires performing NIST SP 800-171 Rev 1 self-assessments on information systems that handle Controlled Unclassified Information, ensuring alignment with federal cybersecurity requirements. It involves developing comprehensive system security plans that document controls, risk mitigations, and compliance postures, followed by accurate submission of assessment data to the Department of Defense Supplier Performance Risk System. The provider must also be prepared to craft and submit rebuttal responses if assessment results trigger inquiries or discrepancies within the SPRS platform. All activities must be conducted in support of systems located at Selfridge Air National Guard Base, with a strict deadline for response set for May 4, 2026. This subcontract falls under NAICS code 541611 for administrative management and general management consulting services and is issued by the Department of Defense through the Medical Supply Chain Pharm FSA.