Cybersecurity Compliance Reporting (NIST SP 800-171)

The contract requires the performance of a comprehensive cybersecurity assessment in accordance with NIST SP 800-171 Rev 1 standards, with the explicit purpose of documenting compliance and submitting the findings through the Supplier Performance Risk System. This includes developing a System Security Plan and an implementation plan that detail how security requirements are met or will be addressed. All deliverables must be formally documented and submitted via the designated government portal to ensure regulatory adherence and situational awareness for the Department of Defense. The assessment must be conducted thoroughly to identify gaps and validate controls across the protected information environment. The contract is classified as a subcontract under the NAICS code 541611 and is issued by the Medical Supply Chain FSH under the Department of Defense. Performance is required at Dyess Air Force Base with a zip code of 79607-1367. The solicitation was posted on May 11, 2026, and responses are due by May 18, 2026. While no set-aside type is specified, the work is tied to a critical defense logistics function and demands strict adherence to federal cybersecurity compliance protocols. All deliverables must be submitted accurately and on time to avoid performance risk and maintain eligibility for future contract opportunities.