NIST SP 800-171 Cybersecurity Compliance and Assessment

The contract requires the execution of NIST SP 800-171 Rev 1 cybersecurity assessments to ensure compliance with Department of Defense Controlled Unclassified Information requirements. This includes developing a comprehensive System Security Plan, conducting internal self-assessments, and submitting detailed evaluation results through the Supplier Performance Risk System to demonstrate adherence to federal security standards. The work is tied to protecting sensitive data within the medical supply chain environment under the authority of the Department of Defense. Performance is to be carried out at Camp Pendleton, California, with a strict deadline for proposal submission on May 18, 2026. The contract is structured as a subcontract and falls under NAICS code 541611, which pertains to management, scientific, and technical consulting services. While no specific point of contact is listed, interested parties must respond via the DIBBS portal using the provided solicitation reference. Compliance with all NIST 800-171 controls and accurate reporting in SPRS are critical to meeting the contractual obligations and maintaining eligibility for DoD contract work involving CUI.