NIST SP 800-171 Compliance Assessment and Reporting

The contract requires performing a NIST SP 800-171 compliance assessment for contractor systems that handle Controlled Unclassified Information, ensuring all required security controls are identified, evaluated, and implemented in alignment with federal standards. A comprehensive System Security Plan must be developed to document the security posture, control implementation, and risk management strategy for the covered systems, with final deliverables submitted to the Department of Defense’s Supplier Performance Risk System. The work is scoped to support systems located at Camp Pendleton, 92055-5677, and the effort is classified as a subcontract under NAICS code 541611, focusing on administrative management and general business services supporting defense operations. Response submissions are due by May 6, 2026, with all compliance activities tied directly to maintaining the integrity and security of CUI within the Medical Supply Chain FSH organization under the Department of Defense.