Cybersecurity Compliance – NIST SP 800-171 Assessment & SPRS Reporting

This contract involves conducting a comprehensive NIST SP 800-171 compliance assessment focused on achieving a minimum compliance score of 110. The contractor is required to thoroughly document the system security architecture and submit the assessment results to the Supplier Performance Risk System (SPRS). The work is to be performed as a subcontract under the Department of Defense's Medical Supply Chain MD SURG FSF agency, with the place of performance located in Williamsburg, Virginia. The solicitation does not specify a set-aside type, and the NAICS code for this contract is 541612, which pertains to administrative management and general management consulting services. The solicitation was posted on May 10, 2026, with the response deadline set for May 18, 2026. The objective is to ensure that the contractor delivers a detailed evaluation and documentation aligned with cybersecurity compliance standards critical to safeguarding controlled unclassified information within DoD supply chains.