NIST SP 800-171 Cybersecurity Compliance Assessment and Reporting

The contract requires comprehensive cybersecurity compliance assessments of contractor systems against NIST SP 800-171 Revision 1 standards, focusing on identifying gaps in security controls and documenting deficiencies. The work involves developing detailed corrective action plans and submitting Plan of Action and Milestones documents along with assessment data in formats mandated by the federal government to ensure alignment with required cybersecurity frameworks. All deliverables must meet stringent government reporting standards and support continued compliance with Department of Defense cybersecurity expectations. The performance location is specified as San Diego, CA, with the work conducted under a subcontract arrangement through the Medical Supply Chain FSH organization, which operates under the Department of Defense. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026, with the North American Industry Classification System code 541611 indicating the work falls under administrative management and general management consulting services. The assigned contract number is SPE2DH26T3761, and all deliverables are expected to be submitted in accordance with federal reporting protocols to maintain the integrity of the defense supply chain’s cybersecurity posture.