Cybersecurity Compliance for CUI (NIST SP 800-171)

The contract requires the assessment and implementation of NIST SP 800-171 controls to protect Covered Defense Information, ensuring full compliance with federal cybersecurity standards for safeguarding Controlled Unclassified Information. This includes conducting a thorough evaluation of current systems and processes, identifying gaps in compliance, and executing necessary technical and administrative controls to meet NIST requirements. The contractor must also prepare and submit SPRS scores and comprehensive documentation to validate adherence, with all deliverables tied to the established compliance framework for defense contractors handling sensitive information. The work is scoped as a subcontract under the Department of Defense, specifically for the Medical Supply Chain MD Surg FSF, with performance location at Fort Stewart, Georgia, ZIP 31314-5185. The solicitation is open under NAICS code 541512, indicating it targets computer systems design and related services. Responses are due by May 6, 2026, and the opportunity was posted on April 30, 2026. The contract focuses exclusively on cybersecurity compliance activities and does not include broader IT infrastructure or development tasks. All efforts must align with DoD expectations for CUI protection, with accurate SPRS reporting serving as a critical measure of contractor readiness and standing.