Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the execution of a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 Revision 1 for systems managed by a Department of Defense contractor that process, store, or transmit Controlled Unclassified Information. The scope includes developing a System Security Plan, a Plan of Action and Milestones, and delivering a summary-level scoring report that evaluates adherence to the required security controls. The assessment must identify gaps in current cybersecurity posture, prioritize remediation efforts, and ensure the contractor’s systems meet DoD standards for protecting CUI. This effort is critical to maintaining authorization and contractual compliance within the defense supply chain. The work is under a subcontract tied to the Medical Supply Chain FSH organization and is governed under NAICS code 541512 for computer systems design services. Performance is designated for WESLACO with a ZIP code of 78596-0922, indicating the physical or operational location where the assessment must be conducted or where the system resides. The solicitation was posted on April 29, 2026, with responses due by May 6, 2026, and all deliverables must align with DoD expectations for contractor cyber readiness. Success requires detailed technical expertise in NIST frameworks, CUI handling protocols, and the ability to produce documentation acceptable to federal oversight entities.