NIST SP 800-171 Compliance Assessment & Documentation

The contract requires a comprehensive assessment of the contractor’s information system against the National Institute of Standards and Technology Special Publication 800-171 Revision 1 controls to ensure alignment with federal cybersecurity requirements for protecting controlled unclassified information. The scope includes a detailed evaluation of existing policies, procedures, and technical safeguards to identify any gaps in compliance, followed by the preparation of thorough documentation to support remediation efforts and facilitate submission to the Supplier Performance Risk System. All findings must be accurately recorded and organized to meet federal reporting standards, with particular attention to the implementation of required security controls and evidence of their effectiveness. The work must be performed in support of the Department of Defense through the Medical Supply Chain FSH, with performance located at Camp Pendleton, California, 92055-5627. This is a subcontract under NAICS code 541611, indicating it involves administrative management and general management consulting services related to cybersecurity compliance. The solicitation was posted on April 30, 2026, and responses are due by May 7, 2026. The contractor must deliver a complete and actionable compliance package that enables the prime contractor or government entity to achieve and maintain an acceptable SPRS score, ensuring continued eligibility for DoD contracts requiring NIST 800-171 adherence.