NIST SP 800-171 Compliance Assessment Services

This contract involves providing cybersecurity assessment services specifically targeting Department of Defense contractors to ensure their compliance with the NIST SP 800-171 Revision 1 standards. The scope includes a thorough review of contractors' System Security Plans, evaluating and scoring their implemented security controls, identifying any compliance gaps, and delivering detailed reports to the Supplier Performance Risk System (SPRS). The objective is to assist DoD contractors in maintaining the required cybersecurity posture to protect sensitive defense information. The services are categorized under NAICS code 541611 and are to be performed in Dublin, California, with the Department of Defense's Medical Supply Chain FSH office overseeing the contract. Responses to the solicitation must be submitted by May 18, 2026, following the posting date of May 11, 2026. As a subcontract opportunity, it offers a focused engagement on cybersecurity compliance assessments without any specified set-aside designations. This contract supports the DoD’s broader mission to safeguard controlled unclassified information within its supply chain by leveraging specialized expertise in NIST 800-171 compliance evaluation.