Subcontractor NIST Compliance Oversight and SPRS Coordination

The contract requires the subcontractor to ensure full compliance with NIST SP 800-171 standards by systematically collecting, reviewing, and validating System Security Plans and assessment scores from all relevant parties. This includes verifying the accuracy and completeness of security posture documentation and submitting validated data to the Supplier Performance Risk System to maintain an accurate and current record of compliance status. Continuous oversight is mandated through targeted audits to confirm adherence to federal cybersecurity requirements and to identify any gaps or deficiencies that could expose controlled unclassified information to risk. The work is scoped under the NAICS code 541611 and is associated with the Department of Defense, specifically the Medical Supply Chain MD Surg FSF, with performance taking place in Williamsburg, Virginia, at the zip code 23185-5830. The solicitation was posted on May 10, 2026, with responses due by May 18, 2026, and is structured as a subcontract under a broader defense contracting framework. All activities must align with DoD cybersecurity protocols, and failure to meet compliance obligations may result in contract noncompliance penalties or termination. The subcontractor must maintain rigorous documentation and demonstrate consistent, verifiable adherence to NIST controls throughout the performance period.