NIST SP 800-171 Compliance Assessment & Reporting

The contract requires performing comprehensive system security assessments to ensure alignment with NIST SP 800-171 Rev 1 standards, focusing on identifying and documenting security controls within information systems. Contractors must develop, maintain, and update System Security Plans that accurately reflect the current security posture and control implementation, while also creating detailed Plans of Action and Milestones to address identified deficiencies and track remediation efforts. All findings, assessments, and corrective action plans must be submitted to the Department of Defense's Supplier Performance Risk System to meet federal compliance requirements. The work is scoped under a subcontract and is tied to a specific performance location in Perry Point, Maryland, with a ZIP code of 21902. The North American Industry Classification System code 541611 indicates this is an information technology consulting service. The solicitation was posted on April 30, 2026, and responses are due by May 7, 2026, with the awarding agency identified as the Department of Defense through its Medical Supply Chain FSH division. Although no point of contact or set-aside details are provided, the requirement demands strict adherence to NIST guidelines and timely reporting to maintain DoD compliance.