NIST SP 800-171 Compliance Assessment & Reporting

The contract requires the performance of a NIST SP 800-171 Rev 1 assessment to evaluate compliance with cybersecurity requirements for protecting controlled unclassified information. The selected contractor must identify gaps in current security controls, develop a detailed Plan of Action and Milestones to address each deficiency, and ensure all corrective actions are documented and tracked. The final deliverable includes submitting a comprehensive assessment score to the Department of Defense’s Supplier Performance Risk System to satisfy the mandatory DFARS clauses 252.204-7012 and 252.204-7020, which govern the protection of covered defense information and cyber incident reporting. This work is critical for maintaining eligibility to support Department of Defense contracts and must be completed within the stipulated timeframe. The opportunity is issued as a subcontract under the NAICS code 541611 for management, scientific, and technical consulting services, with a response deadline of May 7, 2026. Performance is to be conducted at the location in McAllen, Texas, with a ZIP code of 78501-2810, and is solicited by the Medical Supply Chain FSH under the broader Department of Defense. Although the solicitation number and point of contact information are not detailed in the provided data, the submission must align with DIBBS portal procedures as indicated by the provided UI link. Timely and accurate compliance reporting is essential to avoid contract violations and ensure continued access to defense-related work streams.