Cybersecurity Compliance Assessment (NIST SP 800-171)

A cybersecurity assessment is required to evaluate compliance with NIST SP 800-171 Rev 1 standards for the handling of Controlled Unclassified Information, ensuring that appropriate safeguards are in place to protect sensitive data. The assessment must be conducted under a subcontract arrangement and delivered to the Department of Defense through the Medical Supply Chain MD Surg FSF. All findings and supporting documentation must be submitted via a formal email report and electronically uploaded to the DoD Supplier Performance Risk System to meet federal reporting requirements. The work must be performed at the designated location identified as APO with zip code 09094-3215, and responses are due by May 5, 2026, with the solicitation posted on April 29, 2026. This engagement falls under NAICS code 541611, which pertains to management consulting services, specifically aligned with cybersecurity and compliance activities.