NIST SP 800-171 Compliance and System Security Plan Support

The contract seeks a subcontractor to assist the prime contractor in achieving full compliance with NIST SP 800-171 requirements for protecting controlled unclassified information. The scope includes conducting a comprehensive assessment of current security controls, documenting all necessary policies and procedures, and preparing a complete System Security Plan that aligns with NIST standards. The subcontractor must have the expertise to evaluate existing systems, identify gaps in compliance, and implement corrective actions to meet federal cybersecurity requirements. Performance is required at a location in Raleigh, North Carolina, with a deadline for response set for May 18, 2026. The work falls under NAICS code 541618 for other scientific and technical consulting services and is designated as a subcontract under the Department of Defense’s Medical Supply Chain MD Surg FSF. The contract does not specify a set-aside type, and all deliverables must be delivered in accordance with federal cybersecurity protocols to ensure the prime contractor meets mandatory compliance standards for handling sensitive information.