NIST SP 800-171 Compliance & Cybersecurity Assessment

The contract involves performing a self-assessment against the NIST SP 800-171 security controls to evaluate compliance with Department of Defense cybersecurity standards. The scope includes developing a System Security Plan (SSP) that details the implementation of required security controls, as well as creating a Plan of Action and Milestones (POA&M) to address any identified gaps or deficiencies. Upon completion, the results must be submitted to the DoD’s Supplier Performance Risk System (SPRS) to demonstrate adherence and risk management. This subcontract, associated with NAICS code 541611, is issued by the Department of Defense through the Medical Supply Chain MD Surg FSF office, with the place of performance located in Prince Sultan, ZIP code 28310. The solicitation was posted on May 12, 2026, with a response deadline of May 18, 2026. This contract requires expertise in cybersecurity assessment and documentation in order to support the DoD’s efforts to maintain a secure supply chain infrastructure.