NIST SP 800-171 Compliance Assessment

The contract requires a comprehensive assessment of a contractor’s System Security Plan to ensure full alignment with the National Institute of Standards and Technology Special Publication 800-171 Revision 1 requirements. This evaluation will involve a detailed examination of all applicable security controls, including implementation effectiveness, adherence to documented policies, and the adequacy of compensating measures where direct compliance is not achieved. The assessment must result in a formal reporting of findings that clearly identifies gaps, risks, and recommendations for remediation, ensuring the contractor’s environment meets the stringent cybersecurity standards mandated for handling controlled unclassified information. This subcontract is issued under NAICS code 541611 and is associated with the Department of Defense through the Medical Supply Chain FSH entity. The solicitation was posted on May 10, 2026, with a firm response deadline of May 18, 2026. Performance of the work is to be conducted at an FPO location with zip code 96678, though no specific physical address is provided. The contract is not subject to any set-aside classification and is accessible through the DIBBS platform, requiring proposers to submit their responses via the provided online portal in compliance with all technical and procedural requirements outlined in the solicitation.