Cybersecurity Compliance (NIST SP 800-171)

The contract requires the performance of a NIST SP 800-171 cybersecurity assessment to verify compliance with DFARS 252.240-7997, specifically to ensure the protection of Covered Defense Information. The assessment must evaluate the implementation of security controls outlined in NIST SP 800-171 and result in a formal submission of findings to demonstrate adherence to federal cybersecurity standards for handling sensitive defense data. This subcontract is issued under the Department of Defense through the Medical Supply Chain FSH organization and is classified under NAICS code 541611, indicating it relates to management consulting services. All work must be completed and submitted by the response deadline of August 4, 2026, with the expectation that the contractor has the necessary expertise to conduct a thorough and accurate evaluation of control environments. The place of performance and specific reporting requirements are not detailed in the provided data, but full compliance with the regulatory framework is mandatory for contract fulfillment.