NIST SP 800-171 Compliance and Cybersecurity Assessment

The contract requires implementation and assessment of compliance with NIST SP 800-171 for systems that handle controlled unclassified information, ensuring all cybersecurity requirements are properly addressed through documented controls and processes. The contractor must conduct comprehensive self-assessments, maintain accurate records of system configurations, policies, and control implementations, and prepare documentation sufficient for review by the Department of Defense to verify adherence to federal cybersecurity standards for CUI. Performance is focused at JBSA FT SAM HOUSTON with a response deadline of August 17, 2026, and the work is structured as a subcontract under NAICS code 541512, indicating it falls under computer systems design services. The solicitation is managed by the Medical Supply Chain MD Surg FSF under the Department of Defense, and successful bidders must demonstrate technical and operational readiness to meet NIST SP 800-171 requirements through evidence-based compliance tracking and reporting. All efforts must align with DOD expectations for safeguarding sensitive information within the supply chain environment.