NIST SP 800-171 Cybersecurity Assessment and Compliance Support

This contract involves performing a cybersecurity assessment based on the NIST SP 800-171 standard for systems that handle Controlled Unclassified Information (CUI). The contractor is responsible for evaluating the security controls, developing or updating the System Security Plan (SSP) to reflect the current cybersecurity posture, and submitting the resulting findings to the Supplier Performance Risk System (SPRS). The work focuses on ensuring compliance with federal cybersecurity requirements to protect sensitive information. Issued by the Department of Defense under the Medical Supply Chain MD SURG FSF office in Richmond, the subcontract falls under the NAICS code 541611, which pertains to administrative and general management consulting services. The solicitation was posted on May 11, 2026, with a response deadline of May 18, 2026, emphasizing a timely submission from prospective contractors. This contract is a critical component in maintaining cybersecurity integrity for defense-related supply chain systems managing sensitive data.