NIST SP 800-171 Compliance Assessment

The contract seeks a subcontractor to conduct an assessment and ensure compliance with NIST Special Publication 800-171 for protecting controlled unclassified information within contractor information systems. The work is tied to the Department of Defense’s Medical Supply Chain MD Surg FSF and requires adherence to federal security standards designed to safeguard CUI from unauthorized access, disclosure, or compromise. The assessment must evaluate existing security controls, identify gaps, and recommend corrective actions to meet the NIST 800-171 requirements, ensuring the contractor’s systems are fully compliant before any handling of sensitive government data. The opportunity is posted with a deadline for responses on July 27, 2026, and the place of performance is identified as Joint Base Elmendorf-Richardson in Alaska with a ZIP code of 99506-3702. The NAICS code 541512 indicates the work falls under Computer Systems Design and Related Services, suggesting the subcontractor must possess expertise in cybersecurity assessments, information systems auditing, and NIST framework implementation. While no specific set-aside designation is provided, the nature of the work and the military context imply a strong preference for vendors with experience in defense-related compliance environments. The contract is issued through DLA DIBBS and requires the contractor to deliver a thorough compliance report validating that all required security controls are properly implemented and documented.