NIST SP 800-171 Cybersecurity Assessment and Compliance Support

The contract requires performing a cybersecurity assessment aligned with NIST Special Publication 800-171 for systems that handle Controlled Unclassified Information, ensuring compliance with federal security standards. This includes evaluating existing controls, identifying gaps, and either developing a new System Security Plan or updating an existing one to accurately reflect the current security posture and required safeguards. The deliverable must include a documented plan that maps all applicable NIST 800-171 requirements to implemented or planned controls, and the final assessment findings must be submitted to the Supplier Performance Risk System to validate compliance status. The work is scoped as a subcontract under the Department of Defense, specifically for the Medical Supply Chain MD Surg FSF, with performance taking place in Richmond, Virginia, and is subject to a tight turnaround with a response deadline just one week after posting.