Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contract seeks support services to assist the prime contractor in achieving NIST SP 800-171 compliance, focusing on the development of a comprehensive System Security Plan, conducting a self-assessment of security controls, and submitting the evaluation results through the Supplier Performance Risk System. The work is critical to ensuring that the contractor meets federal cybersecurity requirements for handling controlled unclassified information, with deliverables centered on documentation, evaluation, and regulatory reporting to satisfy Department of Defense standards. The effort must align with the specific framework outlined in NIST SP 800-171 and be executed with attention to accuracy and completeness to enable successful compliance validation. This is a subcontract opportunity under the NAICS code 541611, managed by the Department of Defense through the Medical Supply Chain FSH organization, with performance expected at an FPO address and a zip code of 34089. The solicitation was posted on May 12, 2026, and responses are due by May 19, 2026, indicating a short turnaround period requiring prompt action from qualified subcontractors. The nature of the work demands expertise in cybersecurity compliance, experience with NIST frameworks, and familiarity with SPRS submission protocols, making it suitable for firms with a proven track record in supporting defense contractors with federal information security obligations.