NIST SP 800-171 Cybersecurity Compliance Assessment

A comprehensive cybersecurity compliance assessment is required to evaluate a contractor’s information systems against the NIST SP 800-171 Rev 1 standards, focusing on the implementation and effectiveness of security controls, the accuracy and completeness of system security plans, and overall adherence to federal cybersecurity requirements. The assessment must be conducted in accordance with established protocols to ensure all pertinent controls are thoroughly reviewed, documented, and validated through direct examination of policies, procedures, and technical configurations. Findings from the assessment must be formally reported through the Supplier Performance Risk System, ensuring transparency and alignment with Department of Defense reporting expectations. This subcontract opportunity is open for response until May 19, 2026, and falls under NAICS code 541611, indicating it is related to management consulting services focused on cybersecurity. The work is being procured by the Medical Supply Chain FSH under the Department of Defense and is expected to be performed remotely or at the contractor’s facility with no specified physical location for performance.