NIST SP 800-171 Compliance Assessment & Reporting

The contract requires performing comprehensive compliance assessments against NIST SP 800-171 Rev 1 standards for Department of Defense systems, focusing on identifying gaps in security controls and developing Plans of Action and Milestones to remediate deficiencies. The work involves evaluating the implementation of protective measures across all relevant areas of the cybersecurity framework and ensuring alignment with federal requirements for safeguarding controlled unclassified information. Assessment findings must be accurately documented and submitted to the Supplier Performance Risk System to meet DoD reporting obligations. Performance of this subcontract is centered on supporting DoD systems with a place of performance located at APO 09094-3219, under the Medical Supply Chain FSH agency within the Department of Defense. The solicitation, issued under NAICS code 541611, is classified as a subcontract with a response deadline of May 6, 2026, and was posted on April 29, 2026. All deliverables must adhere strictly to NIST guidelines and include detailed documentation of gaps, mitigation strategies, and progress tracking to ensure timely and full compliance with federal cybersecurity standards.