Cybersecurity Compliance Support (NIST SP 800-171)

The contract supports the development of a System Security Plan, a NIST SP 800-171 assessment, and the submission of required documentation to the Supplier Performance Risk System to ensure compliance with Department of Defense cybersecurity requirements. The work is focused on enabling the contractor to meet the mandated security controls outlined in NIST SP 800-171, which govern the protection of controlled unclassified information within nonfederal systems. The effort encompasses documenting security policies and procedures, evaluating current security postures against NIST standards, and generating accurate SPRS submissions to demonstrate compliance to federal requirements. This is a subcontract under the Department of Defense's Medical Supply Chain FSH, with performance expected to occur in Suffolk, Virginia, at the postal code 23435-5000. The North American Industry Classification System code is 541611, indicating it relates to computer systems design and related services. The solicitation was posted on May 11, 2026, and response submissions are due by May 18, 2026. The contract is not subject to any specific set aside classifications, and all work must be completed in alignment with DOD cyber compliance frameworks. The full details are accessible through the DIBBS portal at the provided URL.