Cybersecurity Compliance Support (NIST SP 800-171)

The contract seeks support for achieving NIST SP 800-171 Rev. 1 compliance on behalf of the prime contractor, focusing on the development and implementation of critical cybersecurity documentation and processes for handling Controlled Unclassified Information. Key deliverables include the creation of a comprehensive System Security Plan, conducting a thorough self-assessment against the 110 security requirements outlined in the NIST standard, and submitting the resulting findings through the Supplier Performance Risk System. This effort is essential to ensure the organization meets federal cybersecurity obligations for safeguarding CUI within its systems and operations. The work is scoped as a subcontract under the Department of Defense, specifically supporting the Medical Supply Chain MD Surg FSF, with performance to be conducted at a military postal address in FPO, zip 96678. The NAICS code 541611 indicates the scope involves management, scientific, and technical consulting services related to cybersecurity. The solicitation was posted on May 11, 2026, with a firm response deadline of May 18, 2026, requiring timely submission of proposals to be considered. This engagement is critical for maintaining compliance and enabling continued participation in DoD supply chain activities that involve sensitive but unclassified data.