NIST SP 800-171 Compliance Assessment & Reporting

The contract involves conducting a comprehensive cybersecurity assessment to ensure compliance with NIST Special Publication 800-171 standards for the protection of Controlled Unclassified Information (CUI). The selected subcontractor is required to thoroughly evaluate existing security controls, identify any gaps relative to NIST SP 800-171 requirements, and develop detailed remediation plans to address those deficiencies. The results of the assessment must be submitted to the Department of Defense Supplier Performance Risk System (SPRS). Issued by the Medical Supply Chain Pharm FSA under the Department of Defense, the contract is identified under NAICS code 541611, which typically covers administrative management and general management consulting services. The scope of work is to be performed in the FPO area, with the solicitation posted on May 11, 2026, and responses due by May 18, 2026. This subcontract opportunity emphasizes the critical nature of safeguarding DoD-related information through compliance verification and risk mitigation strategies.