NIST SP 800-171 Compliance Assessment and Reporting

This subcontract focuses on conducting a thorough assessment of compliance with NIST SP 800-171 standards, which govern the protection of Controlled Unclassified Information in non-federal systems and organizations. The contractor is required to evaluate the current security measures, ensure adherence to DFARS clause 252.204-7012 related to safeguarding covered defense information, and accurately submit the resulting Department of Defense assessment score to the Supplier Performance Risk System (SPRS). This effort is vital for maintaining cybersecurity standards within the defense supply chain. The contract, titled "NIST SP 800-171 Compliance Assessment and Reporting," falls under the NAICS code 541618, which relates to other management consulting services. It is issued by the Department of Defense's Medical Supply Chain MD SURG FSF office and designates Cannon Air Force Base, New Mexico, as the place of performance. The solicitation was posted on May 10, 2026, with a response deadline of May 18, 2026, emphasizing a timely engagement for interested subcontractors to provide their proposals and demonstrate their capability to support the DoD’s compliance and reporting requirements effectively.