Cybersecurity Compliance Support (NIST SP 800-171)

The contract requires support to the prime contractor in achieving full NIST SP 800-171 compliance for the protection of Controlled Unclassified Information, with a focus on developing a comprehensive System Security Plan and attaining a high assessment score of 105 out of 110. This work is critical to meeting federal cybersecurity standards for handling sensitive but unclassified data within the Department of Defense environment. The scope includes implementing security controls, documenting compliance procedures, and ensuring all technical and administrative measures align with the NIST framework to pass formal assessments. The subcontract is tied to the MEDICAL SUPPLY CHAIN MD SURG FSF initiative under the Department of Defense and has a place of performance in San Antonio, Texas, with a zip code of 78226. The opportunity was posted on April 30, 2026, and responses are due by May 6, 2026. It falls under NAICS code 541512, which categorizes it as custom computer programming services, indicating the support will involve technical cyber defense planning and implementation rather than hardware or off-the-shelf solutions. The subcontract is not subject to any specified set-aside classification and is accessible to any qualified vendor able to deliver the cybersecurity compliance services required.