NIST SP 800-171 Cybersecurity Compliance Assessment & Reporting

A cybersecurity assessment is required to evaluate compliance with NIST SP 800-171 Rev 1 for the protection of Covered Defense Information, involving a thorough gap analysis of current security controls, a detailed review of system architecture, and validation of implementation practices across all relevant systems. The assessment must identify deficiencies against the NIST requirements and provide actionable recommendations for remediation, with all findings formally documented and submitted through the Supplier Performance Risk System. The work is scoped under a subcontract for the Department of Defense, specifically supporting the Medical Supply Chain MD Surg FSF, with performance taking place at APO 09094-3219. The solicitation closed on May 5, 2026, and the NAICS code 541611 indicates the focus on management, scientific, and technical consulting services related to cybersecurity operations.