NIST SP 800-171 Cybersecurity Compliance Assessment and Reporting

The contract requires a comprehensive cybersecurity assessment to ensure compliance with NIST SP 800-171 Rev 1, focusing on safeguarding controlled unclassified information within the Department of Defense environment. The scope includes evaluating existing security controls, identifying gaps between current practices and NIST requirements, and developing a detailed System Security Plan that outlines how the organization addresses each control. Findings must be documented and formally reported to the Supplier Performance Risk System to satisfy federal compliance obligations. The work is to be performed at Camp Pendleton, California, under a subcontract arrangement with a strict deadline for response set for May 6, 2026. This effort supports the Medical Supply Chain MD Surg FSF initiative and falls under NAICS code 541611, indicating it is centered on administrative management and general management consulting services focused on cybersecurity.