NIST SP 800-171 Cybersecurity Compliance and Assessment

This contract requires the implementation and assessment of cybersecurity controls to safeguard Controlled Unclassified Information (CUI) on non-federal information systems, ensuring full compliance with NIST Special Publication 800-171 and Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The work involves configuring technical, administrative, and physical safeguards to meet the specified security standards, along with preparing and maintaining comprehensive system documentation that demonstrates adherence to these frameworks. A critical deliverable includes submission of the Security Assessment Report through the Supplier Performance Risk System (SPRS) to validate the contractor’s cybersecurity posture. The contract is structured as a subcontract under the Medical Supply Chain MD Surg FSF, a component of the Department of Defense, with performance expected to occur at Camp Pendleton, California, 92055. It falls under NAICS code 541611 for Management, Scientific, and Technical Consulting Services, indicating a focus on advisory and compliance-driven cybersecurity services rather than product procurement. The solicitation was posted on May 13, 2026, with responses due by May 19, 2026, suggesting a time-sensitive engagement requiring prompt mobilization and execution. All work must align with federal cybersecurity directives, and successful performance will hinge on demonstrated expertise in NIST 800-171 implementation, documentation rigor, and accurate SPRS reporting.