NIST SP 800-171 Compliance Assessment Services

The contract requires the provision of cybersecurity self-assessments or third-party evaluations of contractor information systems to ensure alignment with NIST SP 800-171 requirements. This includes the development and review of system security plans and the submission of assessments through the Supplier Performance Risk System. The work is scoped to verify compliance with federal cybersecurity standards for handling controlled unclassified information within defense contractor systems. The evaluation process must be thorough, objective, and documented to meet federal accountability benchmarks. This is a subcontract issued under the Department of Defense through the Medical Supply Chain MD Surg Fsf office, with performance expected at Fairchild AFB, Washington, zip code 99011-8704. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. The North American Industry Classification System code is 541611, indicating it falls under Management, Scientific, and Technical Consulting Services. The contract does not specify a set-aside designation and is open to eligible subcontractors responding to the solicitation numbered SPE2DS26T061J.