Cybersecurity Compliance – NIST SP 800-171 Assessment and Remediation

The contract requires comprehensive cybersecurity compliance services to meet DFARS 252.204-7012 requirements by performing a NIST SP 800-171 assessment to evaluate current security controls, identify gaps compared to required standards, and produce a full System Security Plan that documents the organization’s control environment and mitigation strategies. The scope includes not only assessment and documentation but also active remediation efforts to close identified control deficiencies, ensuring the system achieves full compliance with federal cybersecurity mandates. The final deliverable includes submission of the required SPRS score, verifying achievement of the necessary compliance level for handling controlled unclassified information. This subcontract is issued under the Department of Defense, specifically by the Medical Supply Chain MD Surg FSF, with a NAICS code of 541611 for management, scientific, and technical consulting services. The solicitation was posted on April 29, 2026, and responses are due by May 5, 2026, indicating a tight timeline for execution. While the place of performance and point of contact details are not provided, the work is anticipated to support a defense-related system requiring strict adherence to NIST and DFARS cybersecurity standards. All activities must align with federal guidelines to enable proper reporting and audit readiness through the SPRS platform.