Cybersecurity Compliance Support – NIST SP 800-171 Implementation

The contract requires the provision of advisory services to implement NIST SP 800-171 requirements aimed at safeguarding Controlled Unclassified Information, with tasks including the development of a comprehensive System Security Plan, execution of control assessments to evaluate compliance, and submission of assessment results to the Supplier Performance Risk System. The scope centers on ensuring full alignment with federal cybersecurity standards for CUI protection across systems and operations governed by the contract. Performance is expected to be conducted at a designated location in Johnston, Iowa, with delivery of deliverables tied directly to regulatory compliance milestones. This is a subcontract under the Department of Defense, specifically managed by the Medical Supply Chain MD Surg FSF, and falls under NAICS code 541611 for management consulting services. The solicitation was posted on May 13, 2026, with a response deadline of May 19, 2026, indicating a tight turnaround for potential offerors to submit proposals. While the contracting office details and point of contact are not provided, the place of performance and agency context suggest the work supports defense-related medical supply chain infrastructure requiring stringent cybersecurity controls. All activities must result in verifiable compliance evidence submitted through SPRS to maintain contractual and regulatory standing.