NIST SP 800-171 Compliance Assessment and Remediation

The contract requires a comprehensive gap assessment of information systems against the NIST SP 800-171 security controls to identify deficiencies and develop a roadmap for achieving full compliance. The vendor must evaluate existing systems, document control gaps, and execute targeted remediation efforts to align with all required NIST standards. Deliverables include a detailed System Security Plan that outlines organizational governance, access controls, risk management practices, and technical safeguards, as well as an updated SPRS score reflecting improved compliance status. The work is scoped as a subcontract under the Department of Defense, specifically managed by the Medical Supply Chain FSH, with performance expected to occur at the FPO location identified by zip code 96616. The solicitation was posted on May 13, 2026, and responses must be submitted by May 20, 2026, with NAICS code 541611 indicating it pertains to administrative management and general management consulting services.