NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires a comprehensive compliance assessment against NIST SP 800-171 Revision 1 for systems that handle Covered Defense Information, ensuring alignment with Department of Defense cybersecurity standards. The work includes developing or revising a System Security Plan to document control implementation, conducting either a self-assessment or engaging a third-party to evaluate adherence, and formally submitting the assessment results to the Supplier Performance Risk System to fulfill obligations under DFARS clauses 252.204-7012 and 252.204-7020. All activities must be completed by the response deadline of May 4, 2026, and are tied to a subcontract solicitation under NAICS code 541611, with performance expected at FPO, ZIP 96678. The effort is driven by the Medical Supply Chain MD Surg FSF under the Department of Defense, requiring precise documentation and reporting to maintain contractual compliance and safeguard sensitive defense information.