Cybersecurity Compliance Support – NIST SP 800-171 Assessment & Documentation

This contract requires comprehensive cybersecurity support to ensure compliance with DFARS 252.204-7012 through a detailed NIST SP 800-171 assessment, complete system architecture documentation, and a structured implementation plan. The work involves evaluating existing systems against the NIST framework to identify gaps in security controls, documenting the current and target architectural state, and developing actionable steps to achieve full compliance. The deliverables must align with Department of Defense standards for protecting controlled unclassified information within contractor systems. The contract is issued as a subcontract under the Medical Supply Chain FSH agency, with performance required at APO 09604-6180. Responses are due by May 6, 2026, and the work falls under NAICS code 541611 for management, scientific, and technical consulting services. The effort is critical for safeguarding sensitive defense supply chain data and must be executed with precision to meet federal regulatory obligations. All activities must be completed within the timeline and scope defined by the solicitation, with no set-aside provisions specified.