Cybersecurity Compliance (NIST SP 800-171)

This contract involves implementing, maintaining, and documenting security controls based on the NIST SP 800-171 standard to safeguard Controlled Unclassified Information (CUI). The work includes supporting the Supplier Performance Risk System (SPRS) assessment submissions as mandated by the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012. The focus is on ensuring compliance with cybersecurity requirements within the Department of Defense supply chain, particularly the Medical Supply Chain FSH agency. The contract is a subcontract opportunity with a solicitation deadline on May 20, 2026, following its posting on May 13, 2026. It falls under the NAICS code 541512, which covers computer systems design services. The place of performance is indicated as FPO with the zip code 09573, a designation typically used for overseas military locations. The contract aims to support DoD efforts to enhance cybersecurity posture and risk management in its contractor base by adhering to established standards for protecting sensitive information.