NIST SP 800-171 Compliance Assessment & Reporting

The contract requires a comprehensive assessment of information systems to ensure alignment with NIST SP 800-171 security requirements, focusing on the protection of controlled unclassified information. This includes conducting a detailed evaluation of system controls, documenting all findings, and calculating scores using the Department of Defense Assessment Methodology to determine compliance status. The deliverables encompass fully detailed compliance reports accompanied by complete system architecture documentation that illustrates how security controls are implemented, monitored, and maintained across the environment. The work is to be performed at F.E. Warren Air Force Base with a zip code of 82005-3906, under a subcontract structure, and must be completed by the response deadline of May 18, 2026. The effort is tied to the Medical Supply Chain FSH under the Department of Defense, using NAICS code 541611 for information technology consulting services.