NIST SP 800-171 Compliance and SPRS Assessment Reporting

The contract requires the execution of a cybersecurity assessment aligned with NIST SP 800-171 Rev 1 to ensure compliance with Department of Defense information security standards. This includes the development of a comprehensive System Security Plan that documents the organization’s security posture, followed by the implementation of specific security controls to address identified risks and requirements. The completed assessment and control implementation must be reported through the Supplier Performance Risk System to validate adherence to federal cybersecurity mandates. The work is structured as a subcontract under the Medical Supply Chain MD Surg FSF, a division of the Department of Defense, with performance location specified in Weslaco, Texas, 78596-0922. The solicitation was posted on April 29, 2026, with responses due by May 5, 2026, and is categorized under NAICS code 541512 for computer systems design services. All activities must be completed in alignment with DoD expectations for safeguarding controlled unclassified information within the supply chain.