Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the performance of a comprehensive NIST SP 800-171 cybersecurity assessment to evaluate compliance with safeguarding requirements for covered defense information. This includes identifying any gaps in existing security controls, documenting findings, and preparing a System Security Plan Report Submission (SPRS) to officially record the assessment outcome. For all controls that are not currently met, the contractor must develop a detailed Plan of Action and Milestones (POA&M) outlining corrective actions, assigned resources, timelines, and risk mitigation strategies to achieve full compliance. The work is tied to safeguarding sensitive information within the Department of Defense’s supply chain environment and must align with federal cybersecurity standards. The contract is structured as a subcontract under the Medical Supply Chain Pharm FSA, with performance located at Fort Campbell, Kentucky, 42223-5000. It falls under NAICS code 541611 for Management Consulting Services and was posted on May 13, 2026, with a response deadline of May 19, 2026. The effort is critical to ensuring adherence to DoD cybersecurity requirements and must be executed with precision to support the defense industrial base's compliance obligations. All deliverables must be accurate, complete, and submitted in accordance with federal reporting protocols to avoid noncompliance risks.