Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the performance of cybersecurity assessments on Department of Defense contractor systems to verify compliance with NIST Special Publication 800-171, specifically focused on safeguarding Controlled Unclassified Information. The work involves evaluating the implementation of security controls, assigning scores to each control based on its completeness and effectiveness, and compiling System for Award Management (SPRAM) reporting documentation to formally document the assessment outcomes. The assessments must be carried out with precision to ensure all CUI protection requirements are thoroughly validated and reported. This is a subcontract opportunity under the Medical Supply Chain MD Surg FSF, with the placing agency being the Department of Defense. The solicitation is open for responses until May 5, 2026, and the performance location is designated as APO with ZIP code 09094-3219. The North American Industry Classification System code for this contract is 541611, indicating it falls within the category of administrative management and general management consulting services. The opportunity is accessible online through the DIBBS platform for eligible subcontractors seeking to support DoD cybersecurity compliance efforts.