Cybersecurity Compliance Support (CMMC/NIST SP 800-171)

The contract requires support to assist a prime contractor in achieving and maintaining compliance with DFARS cybersecurity standards, specifically focusing on NIST SP 800-171 requirements for the protection of Controlled Unclassified Information. The scope includes developing a System Security Plan, creating and managing a Plan of Action and Milestones to address security gaps, and ensuring alignment with CMMC frameworks to safeguard sensitive data handled within the supply chain. This effort is critical for meeting Department of Defense obligations and maintaining operational readiness in environments handling CUI. The work is tied to a subcontract under the Medical Supply Chain MD Surg FSF organization, with performance located at Camp Pendleton, California, 92055-5627. The solicitation was posted on April 30, 2026, with responses due by May 6, 2026, under NAICS code 541611 for Management Consulting Services. Although no set-aside type is specified, the engagement is intended to provide expert cybersecurity compliance support to ensure the prime contractor meets all federal defense information security mandates. Access to the full solicitation is available via the DIBBS portal for qualified subcontractors.