NIST SP 800-171 Compliance Assessment & System Security Plan Development

The contract requires the development and documentation of System Security Plans and Plans of Action and Milestones to ensure full compliance with NIST SP 800-171 Rev 1 and DFARS 252.204-7012 standards, which are mandatory for protecting controlled unclassified information within Department of Defense systems. The work must align with DoD cybersecurity requirements and include thorough assessment, gap analysis, and remediation planning to address vulnerabilities and meet federal security controls. All deliverables must be formally documented, actionable, and capable of withstanding audit to demonstrate ongoing compliance. The contract is a subcontract under the Medical Supply Chain MD Surg FSF organization within the Department of Defense, with performance required at Fort Hood, Texas, ZIP 76544. It was posted on April 26, 2026, and responses are due by May 4, 2026. The NAICS code 541611 indicates this is a management consulting services contract focused on technical compliance and cybersecurity strategy. The solicitation is not subject to any specific set-aside categories and is accessible through the DIBBS platform. The expectation is for the contractor to deliver fully compliant documentation that supports the DoD’s mission of securing sensitive data across its supply chain.