NIST SP 800-171 Compliance Assessment and SPRS Reporting

The contract requires a thorough evaluation of the contractor’s information systems to ensure compliance with NIST SP 800-171 standards, focusing on the protection of controlled unclassified information. The assessment involves documenting existing security controls, identifying gaps, and submitting the findings to the Department of Defense’s Supplier Performance Risk System (SPRS). Key deliverables include a calculated security score reflecting compliance levels, a detailed system security plan outlining implemented controls, and a roadmap for achieving or maintaining full compliance. Issued by the Department of Defense's Medical Supply Chain MD SURG FSF, this subcontract is set to be performed in Las Vegas, with responses due shortly after the posting date. The solicitation calls for specialized expertise under NAICS code 541611, which covers administrative management and general management consulting services. The contract emphasizes timely and accurate reporting to the SPRS to support DoD’s risk management and supply chain integrity efforts.