Cybersecurity Assessment and NIST SP 800-171 Compliance Services

This contract involves performing technical evaluations to ensure systems meet the requirements outlined in NIST SP 800-171 Rev 1, a standard focused on safeguarding controlled unclassified information within non-federal systems. The contractor will be responsible for generating certified reports that document compliance, which may also include preparing the Supplier Performance Risk System (SPRS) reports if necessary. The services are intended to support cybersecurity assessment efforts and facilitate compliance verification for systems employed by the Department of Defense. The contract is categorized under NAICS code 541611, which relates to administrative management and general management consulting services, indicating a focus on expert evaluation and reporting rather than system implementation. The work will be performed at Camp Lejeune, and the subcontract opportunity was posted on May 10, 2026, with a response deadline set for May 18, 2026. The contracting agency is the Medical Supply Chain MD Surg FSF office within the Department of Defense, emphasizing the contract’s role in supporting healthcare-related defense supply chain security.