NIST SP 800-171 Compliance Assessment Support

The contract seeks specialized support to assess and document compliance with NIST Special Publication 800-171 requirements for protecting controlled unclassified information within non-federal information systems. The work focuses on ensuring that systems handling such information meet the security controls outlined in the standard, including policy development, implementation validation, gap analysis, and thorough documentation to demonstrate adherence. This effort is critical for organizations operating under Department of Defense contracts and is intended to fortify the security posture of systems that process, store, or transmit sensitive but unclassified data. The contract is structured as a subcontract under the NAICS code 541512, which classifies it as computer systems design and related services. It is being managed by the Medical Supply Chain MD Surg FSF under the broader Department of Defense umbrella, with a response deadline of July 27, 2026. While specific performance locations and point of contact details are not provided, the work must be executed in alignment with federal cybersecurity standards and is likely to require collaboration with internal teams and external stakeholders to validate controls and prepare audit-ready documentation. The solicitation is accessible through the DIBBS platform and targets qualified service providers with demonstrated expertise in NIST 800-171 implementation and compliance assessment.