NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires the conduct of cybersecurity assessments for IT systems to ensure compliance with NIST SP 800-171 Revision 1 standards, specifically targeting Department of Defense contractors. The work involves identifying gaps in security controls, evaluating the effectiveness of existing safeguards, and delivering formal assessment scores that document the level of compliance. These assessments are critical for validating that contractors handling controlled unclassified information meet federal cybersecurity requirements. The task is structured as a subcontract under the NAICS code 541611 for administrative management and general management consulting services, with performance expected at FPO, ZIP 09564. The solicitation was posted on May 11, 2026, and responses are due by May 18, 2026. The contracting organization is the Medical Supply Chain Pharm FSA, operating under the Department of Defense, indicating that the assessments support defense supply chain security objectives. All deliverables must be precise, formally documented, and aligned with NIST guidelines to satisfy DoD compliance expectations.