Cybersecurity Compliance for CUI (NIST SP 800-171)

The contract requires the contractor to perform a self-assessment of all information systems that handle Controlled Unclassified Information in compliance with NIST Special Publication 800-171 Revision 1, ensuring that security controls are properly implemented and documented. The assessment must be completed and submitted through the Supplier Performance Risk System (SPRS) by the specified deadline, with the primary focus on validating adherence to cybersecurity requirements for protecting sensitive but unclassified federal information. The place of performance is identified as Williamsburg, Virginia, with a zip code of 23185, indicating where the systems being assessed are located or operated. This is a subcontract under the Department of Defense, specifically managed by the Medical Supply Chain MD Surg FSF, and falls under NAICS code 541611 for Management Consulting Services, implying that the work involves technical guidance, compliance evaluation, and reporting rather than direct system development or operations. The response deadline is set for May 6, 2026, and the solicitation is publicly accessible via the DIBBS portal, requiring timely submission to meet federal compliance obligations.