NIST SP 800-171 Compliance Implementation & SPRS Assessment

The contract requires the implementation, documentation, and assessment of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within the Department of Defense’s supply chain environment. The work must ensure all required technical and procedural safeguards are fully applied to protect CUI, with comprehensive documentation provided to demonstrate compliance across all specified control families. The successful vendor will be responsible for conducting a formal assessment of the implemented controls and submitting the resulting data to the DoD Supplier Performance Risk System to satisfy federal compliance obligations. The task is structured as a subcontract under NAICS code 541612 and is performed at APO, ZIP 09094-3219, with a response deadline of May 6, 2026. The solicitation is issued by the Medical Supply Chain FSH under the broader Department of Defense, indicating the work supports critical defense logistics infrastructure. While no set-aside designation is specified, full compliance with NIST controls and timely SPRS submission are mandatory for contract fulfillment. All deliverables must align with federal requirements for CUI protection and be verifiable through documented evidence and official reporting channels.