NIST SP 800-171 Compliance Assessment Services

The contract requires the provision of cybersecurity assessment services to evaluate Department of Defense contractors for compliance with NIST SP 800-171 Revision 1 standards. This includes a thorough review of System Security Plans, scoring implementation of required security controls, identifying gaps in adherence to the framework, and submitting detailed assessment results to the Supplier Performance Risk System. The work is intended to ensure that defense contractors meet mandatory federal cybersecurity requirements to protect controlled unclassified information. The solicitation is issued as a subcontract under NAICS code 541611, with performance expected to be conducted at a location in Dublin, California, with a ZIP code of 94568-4328. Responses must be submitted by May 18, 2026, and the opportunity was posted on May 11, 2026, under the auspices of the Department of Defense’s Medical Supply Chain FSH office.