NIST SP 800-171 Cybersecurity Assessment and Compliance Implementation

The contract requires a comprehensive assessment and full implementation of NIST SP 800-171 Rev 1 cybersecurity controls to ensure compliance with Department of Defense requirements. This includes conducting a detailed gap analysis to identify deficiencies in existing security posture, followed by the deployment of necessary safeguards to meet all required controls. The work must result in a successful System Security Plan and SPRS reporting to validate compliance status, with all activities focused on achieving and maintaining DoD standards for protecting Controlled Unclassified Information. The project is scoped as a subcontract under NAICS code 541512, with performance taking place in Asheville, North Carolina, 28806. The solicitation was posted on May 11, 2026, and responses are due by May 18, 2026. The contracting organization is the Department of Defense, specifically under the Medical Supply Chain Pharm FSA, though no point of contact or set-aside details are provided. The work must be delivered within the specified timeline to meet federal compliance obligations, with all deliverables tied to the successful execution of NIST SP 800-171 Rev 1 requirements.