NIST SP 800-171 Compliance Implementation & Reporting

This contract involves the implementation and documentation of cybersecurity controls in accordance with NIST SP 800-171 Rev 1 for systems that manage Controlled Unclassified Information (CUI). The scope includes developing a comprehensive System Security Plan (SSP) that outlines compliance efforts and preparing the required submission to the Department of Defense's Supplier Performance Risk System (SPRS). The objective is to ensure that all necessary security measures are properly applied and documented to meet DoD requirements. The opportunity is a subcontract under the Department of Defense's Medical Supply Chain MD Surg FSF office, with work performed in Williamsburg, VA (zip code 23185-5830). It falls under the NAICS code 541611, which pertains to Administrative Management and General Management Consulting Services. The solicitation was posted on May 12, 2026, and proposals are due by May 18, 2026. The contract emphasizes meeting stringent cybersecurity standards to safeguard sensitive information critical to defense operations.