Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires performing a self-assessment of the cybersecurity posture in accordance with NIST Special Publication 800-171 to ensure compliance with standards for protecting Covered Defense Information. The results of this assessment must be formally submitted to the Supplier Performance Risk System, and ongoing safeguards must be maintained to secure CDI throughout the performance period. The contractor is obligated to implement and sustain the necessary technical, physical, and administrative controls outlined in NIST SP 800-171 and retain the capability to report any cybersecurity incidents promptly and accurately. This subcontract is associated with the Department of Defense, specifically under the Medical Supply Chain MD Surg FSF, with performance based at Barksdale AFB, Louisiana, zip code 71110-2425. The solicitation was posted on August 4, 2026, and responses are due by August 10, 2026. It falls under NAICS code 541611, indicating it relates to management consulting services, though the specific scope focuses exclusively on cybersecurity compliance and assessment activities with no set-aside provisions designated.