Cybersecurity Assessment & NIST SP 800-171 Compliance Implementation

This contract requires the performance of comprehensive cybersecurity assessments and the implementation of NIST SP 800-171 security controls on systems that handle Controlled Unclassified Information (CUI). The work is focused on ensuring all required security measures are properly deployed, documented, and verified to meet federal compliance standards. The ultimate goal is to achieve a score of 110 in the Supplier Performance Risk System (SPRS), which signifies full compliance with the NIST framework for protecting CUI. All documentation confirming adherence to the required controls must be prepared and submitted to SPRS as part of the deliverables. The contract is structured as a subcontract under the Department of Defense, specifically tied to the Medical Supply Chain MD Surg FSF, with performance expected to take place at APO, ZIP 09227-0000. It falls under the NAICS code 541611, indicating it relates to management consulting services, particularly in the cybersecurity domain. The solicitation was posted on May 12, 2026, with responses due by May 18, 2026, leaving a narrow window for submission. The work demands precise execution of technical controls, thorough documentation, and successful validation through the SPRS scoring system to meet the government’s cybersecurity requirements.