Cybersecurity Compliance (NIST SP 800-171)

This subcontract focuses on implementing the cybersecurity controls outlined in NIST SP 800-171, specifically designed to protect Controlled Unclassified Information (CUI). The scope includes the development of a comprehensive System Security Plan (SSP) to document the organization's security posture and processes, as well as the submission of a Supplier Performance Risk System (SPRS) score to demonstrate compliance. The contract is issued by the Department of Defense through the Medical Supply Chain MD SURG FSF and is associated with NAICS code 541512, indicating a focus on computer systems design services. The contract requires prompt attention, with responses due by May 19, 2026, after being posted on May 13, 2026. The place of performance is designated at Camp Pendleton with the zip code 92055. The opportunity is categorized as a subcontract without any specific set-aside designation. Interested parties can find more information and submit responses through the designated government procurement platform.