Cybersecurity Compliance (NIST SP 800-171) Support

The contract supports a prime contractor in achieving and maintaining compliance with NIST SP 800-171 requirements for protecting Covered Defense Information, encompassing assessment of current cybersecurity controls, documentation of policies and procedures, and submission of compliance data to the Supplier Performance Risk System. The work involves identifying gaps in security practices, implementing necessary safeguards, and ensuring all required evidence is properly recorded and reported to meet federal defense cybersecurity standards. This effort is critical to sustaining eligibility for Department of Defense contracts and safeguarding sensitive information across the supply chain. The task is structured as a subcontract under the NAICS code 541512, tied to the Medical Supply Chain FSH organization within the Department of Defense, with performance centered in Suffolk, Virginia, ZIP code 23435-5000. The solicitation was posted on April 30, 2026, and responses are due by May 7, 2026. While no set-aside designation is specified, the contract is expected to be executed through DLA’s DIBBS platform, requiring prospective offerors to align with DOD cybersecurity expectations and demonstrate proven experience in NIST 800-171 implementation and SPRS reporting processes.