NIST SP 800-171 Compliance Assessment & Reporting

The contract requires a comprehensive cybersecurity assessment to determine compliance with NIST Special Publication 800-171 for the protection of Controlled Unclassified Information within the Department of Defense supply chain. The evaluation must identify gaps in existing security controls, analyze deficiencies against the specified framework, and deliver detailed remediation plans to address each vulnerability. All findings must be formally documented and submitted to the Department of Defense Supplier Performance Risk System to ensure transparency and accountability in meeting contractual cybersecurity obligations. This subcontract is issued under NAICS code 541611 and is performance-based with a designated place of performance in FPO with zip code 96667. The solicitation was posted on May 11, 2026, and responses are due by May 18, 2026, leaving a narrow window for submission. The work is tied directly to the Medical Supply Chain Pharm FSA under the Department of Defense, emphasizing the critical nature of securing sensitive information across defense-related medical logistics. The evaluation must be thorough, technically sound, and aligned with federal requirements to ensure continued eligibility and operational readiness within the defense ecosystem.