Cybersecurity Assessment and Compliance Gap Analysis

The contract requires conducting comprehensive cybersecurity assessments of Department of Defense contractor information systems to evaluate compliance with NIST SP 800-171 Revision 1 requirements. The work involves identifying gaps in existing security controls, analyzing system configurations and policies, and providing detailed findings that support the DoD’s official assessment scoring process. The objective is to ensure contractors meet federal cybersecurity standards for protecting Controlled Unclassified Information within their systems. The effort is structured as a subcontract under the Medical Supply Chain MD Surg FSF organization within the Department of Defense, with performance centered at Perry Point, Maryland, zip code 21902. The solicitation was posted on May 11, 2026, and responses must be submitted by May 18, 2026. The North American Industry Classification System code 541611 indicates the scope falls under administrative management and general management consulting services, emphasizing the need for specialized cybersecurity advisory expertise. The contract is not subject to any set-aside classification, and all work must align with DoD protocols for evaluating and documenting compliance posture.