Cybersecurity Compliance and NIST SP 800-171 Assessment

This contract involves performing a NIST SP 800-171 assessment focused on ensuring compliance with cybersecurity requirements for safeguarding covered defense information. Key tasks include conducting the assessment to identify current security controls, preparing a submission to the Supplier Performance Risk System (SPRS), and developing a Plan of Action and Milestones (POA&M) for any unmet controls discovered during the evaluation. The objective is to help the organization align with Department of Defense cybersecurity standards, thereby enhancing the protection of sensitive defense-related information. The contract is a subcontract issued by the Department of Defense through the Medical Supply Chain Pharm FSA, with performance required at Fort Campbell, zip code 42223-5000. It falls under the NAICS code 541611, indicating management and technical consulting services. The response deadline for this subcontract is May 19, 2026, and it focuses on cybersecurity compliance within a defense supply chain context. The solicitation seeks expertise in assessing cybersecurity posture, reporting compliance status, and providing clear remediation plans to address any gaps in safeguarding critical defense information.