Subcontractor NIST Assessment Coordination and Oversight

The contract requires coordination and oversight of NIST SP 800-171 compliance assessments for subcontractors within the medical supply chain, ensuring all entities have completed a Basic assessment within the past three years and properly reported their scores in the Supplier Performance Risk System. The focus is on maintaining adherence to cybersecurity standards mandated for handling controlled unclassified information, with active verification of assessment validity and SPRS documentation accuracy. Failure to meet these requirements could impact subcontractor eligibility and overall supply chain compliance. This effort is tied to a subcontract under the Department of Defense, specifically managed by the Medical Supply Chain FSH, with performance location in Dublin, California, 94568-4328. The solicitation, identified by number SPE2DH26T3793, is classified under NAICS code 541611 for management consulting services and was posted on May 11, 2026, with responses due by May 18, 2026. The work will demand continuous monitoring, documentation review, and communication with subcontractors to ensure all compliance obligations are met and maintained consistently across the supply chain.