NIST SP 800-171 Cybersecurity Compliance Assessment & SPRS Reporting

The contract entails performing a comprehensive cybersecurity assessment of the contractor’s System Security Plan (SSP) in accordance with the NIST SP 800-171 Rev 1 guidelines. The purpose is to identify any gaps in the security controls, develop a remediation plan to address these vulnerabilities, and compile findings for submission to the Supplier Performance Risk System (SPRS). Additionally, the contractor must respond to any government inquiries regarding the assessment within 14 business days, ensuring timely communication and resolution. This subcontract is posted by the Department of Defense's Medical Supply Chain MD SURG FSF office and focuses on compliance with cybersecurity standards critical to protecting sensitive defense information. The place of performance is located in Asheville, with a response deadline set for one week after the posting date. The work falls under the NAICS code 541611, indicating professional, scientific, and technical services, and it supports the government’s focus on maintaining rigorous cybersecurity standards within its supply chain.