Cybersecurity Compliance Assessment & SPRS Reporting

The contract requires the execution of a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 Rev 1 standards, focusing on identifying gaps in current security controls and developing a detailed System Security Plan to address them. The successful contractor must evaluate the organization’s cybersecurity posture against the required controls, document all findings, and establish a clear, actionable implementation timeline to achieve full compliance. All results, including the official assessment score, applicable CAGE codes, and the roadmap for remediation, must be formally submitted to the Department of Defense’s Supplier Performance Risk System. The work is scoped to be performed at Fort Bragg, North Carolina, under a subcontract arrangement tied to the Medical Supply Chain MD Surg FSF initiative within the Department of Defense. The solicitation was posted on May 10, 2026, with a firm response deadline of May 18, 2026, and the North American Industry Classification System code 541611 indicates that this effort falls under management, scientific, and technical consulting services. Compliance with NIST SP 800-171 is mandatory for contractors handling controlled unclassified information on behalf of the DoD, making accurate reporting and timely submission through SPRS a critical requirement for maintaining eligibility for future DoD contracts.