NIST SP 800-171 Compliance and System Security Plan Support

The contract involves providing support to the prime contractor in achieving full compliance with NIST SP 800-171 standards, which are critical for protecting controlled unclassified information in non-federal systems and organizations. The support includes conducting assessments, preparing control documentation, and developing the System Security Plan (SSP) necessary for demonstrating compliance. This work is vital for maintaining security requirements mandated by the Department of Defense, specifically under the Medical Supply Chain MD SURG FSF office. The contract is classified as a subcontract and falls under the NAICS code 541618, indicating it pertains to other management consulting services. The place of performance is Raleigh, with a postal code of 27607-0000. The solicitation was posted on May 11, 2026, and responses are due by May 18, 2026. Although no set-aside type is specified, the opportunity is geared towards supporting the Department of Defense’s efforts to enhance cybersecurity within its supply chain, providing essential compliance and security planning services.