NIST SP 800-171 Compliance Assessment (Cybersecurity)

The contract requires the performance of NIST SP 800-171 cybersecurity assessments for prime contractors and subcontractors within the Department of Defense supply chain, specifically to ensure adherence to DFARS 252.204-7012 requirements. This includes a thorough review of System Security Plans, accurate scoring of compliance posture, and final reporting through the Supplier Performance Risk System to document and validate cybersecurity controls. The work is focused on evaluating the implementation of security requirements outlined in NIST SP 800-171 to protect controlled unclassified information in nonfederal systems. The contract is categorized as a subcontract under NAICS code 541611, with performance centered in Bethesda, Maryland, at a zip code of 20889-5600. It is managed by the Medical Supply Chain MD Surg FSF organization under the Department of Defense. The solicitation was posted on May 10, 2026, with a response deadline of May 18, 2026. There is no set-aside designation specified, and the point of contact details are not provided; however, further information and submission procedures can be accessed via the DIBBS portal at the provided URL.