NIST SP 800-171 Cybersecurity Compliance & System Security Planning

The contract involves the implementation of NIST SP 800-171 cybersecurity safeguards to protect Controlled Unclassified Information (CUI) within a specified environment. Key deliverables include the development of a comprehensive System Security Plan (SSP), conducting assessments to verify compliance, and submitting reports to the Supplier Performance Risk System (SPRS). The scope also requires ensuring that all subcontractors adhere to these cybersecurity requirements, maintaining a consistent standard throughout the supply chain. Issued by the Department of Defense's Medical Supply Chain MD SURG FSF office, the work will be performed in Schenectady, ZIP code 12301-1072. It is a subcontract opportunity under the NAICS code 541512, focusing on computer systems design services, with a response deadline set for May 18, 2026. The contract underscores the importance of cybersecurity in safeguarding sensitive defense supply information and mandates strict compliance and accountability from all involved parties.