Cybersecurity Compliance & NIST SP 800-171 Assessment

This subcontract involves performing a NIST SP 800-171 assessment aimed at evaluating and documenting the security controls necessary to protect Controlled Unclassified Information (CUI). The contractor is responsible for conducting a thorough assessment of the organization's cybersecurity posture, compiling the required documentation on security controls, and submitting a summary score to the Supplier Performance Risk System (SPRS) prior to final delivery. This process ensures compliance with cybersecurity requirements mandated by the Department of Defense for safeguarding sensitive information. The contract, titled "Cybersecurity Compliance & NIST SP 800-171 Assessment," is associated with the Medical Supply Chain MD SURG FSF office within the Department of Defense. It is categorized under NAICS code 541611, which pertains to administrative management and general management consulting services. The place of performance is identified as Johnston, Zip code 50131. Responses to this subcontract are due by May 19, 2026, with the solicitation posted on May 13, 2026. The contract’s focus on compliance highlights the importance of verifying and maintaining the cybersecurity standards necessary for working with regulated defense-related supply chains.