NIST SP 800-171 Compliance Assessment & Gap Analysis

The contract requires a thorough evaluation of an information system’s security controls aligned with NIST SP 800-171 Revision 1 standards to determine compliance status and identify gaps preventing full SPRS alignment. The work involves analyzing existing controls across technical, operational, and managerial domains, documenting deviations from required practices, and providing actionable recommendations to close those gaps. The goal is to enable full compliance with the Security Assessment and Authorization Framework (SPRS) by delivering a detailed assessment report and a structured remediation plan that prioritizes risks and outlines corrective actions. The contract is classified as a subcontract under NAICS code 541611 and is issued by the Department of Defense through the Medical Supply Chain Pharm FSA. Performance is to be conducted at Fort Stewart, Georgia, with a response deadline of May 18, 2026. While the solicitation number and point of contact are not provided, the requirement emphasizes practical implementation support beyond mere assessment, indicating the need for collaboration with internal teams to ensure remediation steps are feasible and sustainable within the current system architecture and operational environment.