NIST SP 800-171 Compliance Assessment

The contract requires performing cybersecurity compliance assessments in alignment with NIST SP 800-171 Rev 1 for systems that handle Controlled Unclassified Information, with a focus on conducting self-assessments and preparing documentation for submission to the Department of Defense’s Supplier Performance Risk System. The work is scoped to ensure systems meet federal cybersecurity standards for protecting CUI, and deliverables must support accurate SPRS reporting to demonstrate compliance status. This subcontract is tied to the Medical Supply Chain MD Surg FSF under the Department of Defense and is to be performed at Fort Bragg, North Carolina, with a zip code of 28310. The solicitation was posted on April 30, 2026, and responses are due by May 6, 2026, with a NAICS code of 541611 indicating information technology services and related consulting activities.