Cybersecurity Compliance Implementation (NIST SP 800-171)

The contract involves the implementation, assessment, and documentation of NIST SP 800-171 cybersecurity controls for systems that manage Controlled Unclassified Information (CUI). Key deliverables include the development of a comprehensive System Security Plan (SSP) and submission to the Supplier Performance Risk System (SPRS), ensuring compliance with federal cybersecurity requirements. The work is positioned as a subcontract opportunity under NAICS code 541512, which pertains to computer systems design services. This contract is issued by the Department of Defense under the Medical Supply Chain FSH and relates to a place of performance in APO, with the specified ZIP code 96260-5479. The solicitation was posted on May 13, 2026, with responses due by May 20, 2026. The focus on NIST SP 800-171 compliance underscores the importance of protecting sensitive defense-related information within the supply chain environment.