Cybersecurity Compliance Reporting (NIST SP 800-171)

This contract requires the performance of a cybersecurity assessment in accordance with NIST SP 800-171 Revision 1 standards. The contractor must conduct the assessment, thoroughly document the findings, and submit the results through the Supplier Performance Risk System (SPRS). Key deliverables include a System Security Plan (SSP) and an implementation plan outlining steps to address any identified deficiencies or gaps. The work is to be performed at Dyess Air Force Base, with the Department of Defense, specifically the Medical Supply Chain FSH, as the contracting agency. The contract is structured as a subcontract under NAICS code 541611, which pertains to administrative and management consulting services. It was posted on May 11, 2026, with a response deadline of May 18, 2026. Although details like the solicitation number and point of contact are not provided, the contracting avenue and location are clearly specified, indicating the government’s focus on ensuring supplier cybersecurity compliance through standardized federal guidelines.