NIST SP 800-171 Compliance and Cybersecurity Assessment

The contract requires the execution of a comprehensive NIST SP 800-171 assessment across information systems to ensure the protection of Controlled Unclassified Information (CUI), aligning with federal cybersecurity standards. The assessment must evaluate the implementation of security controls outlined in NIST SP 800-171, focusing on the confidentiality, integrity, and availability of CUI within the designated environment. Findings from the assessment must be documented in detail and formally submitted to the Contracting Officer, ensuring full transparency and accountability for compliance status. This subcontract is tied to the Department of Defense and specifically supports the Medical Supply Chain MD Surg FSF, with performance required at Fort Bragg, North Carolina, under the NAICS code 541512, which categorizes it as Computer Systems Design Services. The solicitation was posted on July 23, 2026, and responses are due by July 29, 2026, indicating a tight turnaround for evaluation and reporting. The work involves a technical review of existing cybersecurity measures and the delivery of actionable findings that will inform risk mitigation and compliance decisions by the agency, directly impacting the security posture of DoD-related information systems handling sensitive but unclassified data.