NIST SP 800-171 Cybersecurity Assessment Services

The contract entails performing NIST SP 800-171 cybersecurity assessments on contractor information systems to ensure the adequate protection of Controlled Unclassified Information, with a focus on identifying gaps and deficiencies in security controls as outlined by the standard. Results of these assessments must be formally documented and submitted to the Department of Defense's Supplier Performance Risk System to maintain compliance and support contract oversight. The work is required to be conducted on systems handling CUI and must adhere strictly to the framework specified in NIST Special Publication 800-171, ensuring consistent evaluation methodologies and reporting standards across all contractor environments. The solicitation was posted on April 29, 2026, with responses due by May 5, 2026, and is issued as a subcontract under NAICS code 541611 for computer systems design services. Performance is required to occur at the designated location in Middletown, Connecticut, with a zip code of 06457-1500, and is managed by the Medical Supply Chain MD Surg FSF under the broader Department of Defense. While no specific set-aside status or point of contact is provided, the timeframe and location indicate an urgent and localized requirement to address cybersecurity posture within a defined defense supply chain segment.