Cybersecurity Compliance Implementation & SPRS Reporting

This contract involves the implementation of cybersecurity measures in accordance with NIST SP 800-171 Revision 1 to safeguard Controlled Unclassified Information (CUI). The contractor is responsible for applying these specific security controls, performing self-assessments to evaluate compliance, and submitting the necessary compliance data to the Department of Defense’s Supplier Performance Risk System (SPRS). The purpose of this effort is to ensure that sensitive information related to the Department of Defense is properly protected and that the contractor’s security posture meets federal requirements. The solicitation was posted on May 10, 2026, with a response deadline set for May 18, 2026. It is structured as a subcontract under the NAICS code 541512, which pertains to computer systems design services. The work is to be performed at Luke Air Force Base, with the Department of Defense, specifically the Medical Supply Chain Field Support Hub (FSH), overseeing the contract. Interested parties can access the solicitation details and submit responses through the government’s designated procurement platform.