Cybersecurity Assessment and NIST SP 800-171 Compliance Services

The contract requires the performance of technical evaluations to ensure compliance with NIST SP 800-171 Rev 1 standards, including the generation of certified reports that validate adherence to cybersecurity requirements for controlled unclassified information. The work involves thorough system documentation and may require submission of System Security Plan Reports to the SPRS database if applicable, ensuring alignment with federal cybersecurity mandates. The deliverables are focused on validating and documenting the implementation of security controls established by the NIST framework. This is a subcontract issued under the Department of Defense’s Medical Supply Chain MD Surg FSF, with performance required at Camp Lejeune, North Carolina, specifically at ZIP code 28542-0128. The solicitation was posted on May 10, 2026, and responses must be submitted by May 18, 2026. The North American Industry Classification System code 541611 identifies this as an information technology consulting services requirement, and the effort supports the broader defense infrastructure by enforcing secure handling of sensitive data in accordance with federal cybersecurity guidelines.