NIST SP 800-171 Compliance and Cybersecurity Reporting

The contract requires support for the development and ongoing maintenance of a System Security Plan to ensure the protection of Controlled Unclassified Information in alignment with NIST SP 800-171 standards. This includes conducting comprehensive assessments to evaluate compliance with the security requirements outlined in the NIST framework and submitting all mandated cybersecurity reports to federal authorities. The work is focused on safeguarding sensitive data within a defense-related environment, specifically tied to the Medical Supply Chain MD Surg FSF program under the Department of Defense. Performance of the contract must be carried out at Elizabeth City, North Carolina, with a zip code of 27909-5004, and the opportunity is structured as a subcontract under NAICS code 541611 for management consulting services. The solicitation was posted on May 11, 2026, and responses are due by May 18, 2026, indicating a tight timeline for qualified vendors to submit proposals. The goal is to establish and sustain robust cybersecurity controls that meet federal compliance obligations for handling CUI within a critical medical logistics support framework.