Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires a comprehensive cybersecurity assessment aligned with NIST Special Publication 800-171 Revision 1 for systems that process, store, or transmit Controlled Unclassified Information. The scope includes evaluating the current security posture against the required controls, developing a detailed System Security Plan that documents the organizational and technical safeguards in place, and creating a prioritized remediation roadmap to address any gaps or noncompliance findings. The assessment must be thorough and methodical, ensuring all 110 controls specified in the publication are reviewed and validated, with documentation that clearly demonstrates how each requirement is met or planned for mitigation. The final deliverables must be submitted to the Department of Defense Supplier Performance Risk System, ensuring the results are officially recorded and accessible for compliance verification. The work must be performed in support of the Department of Defense, specifically under the Medical Supply Chain Pharm FSA, with performance occurring at a FPO address with ZIP code 09583. The opportunity is structured as a subcontract with a strict response deadline of May 18, 2026, and falls under NAICS code 541611, indicating it pertains to management consulting services including cybersecurity compliance. All activities are expected to meet federal standards for safeguarding CUI and must be completed within the defined timeframe to satisfy DoD contractual obligations.