NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires the completion of a NIST SP 800-171 Rev 1 cybersecurity compliance assessment for a Department of Defense contractor, focusing on the evaluation of existing security controls to ensure alignment with federal requirements for protecting controlled unclassified information. The work includes developing or revising the System Security Plan to document the implementation of these controls, ensuring the plan accurately reflects current practices and addresses identified gaps. All findings and the updated SSP must be formally submitted to the Supplier Performance Risk System to demonstrate compliance with DoD standards. The performance location is Fort Bliss, Texas, with the contract issued as a subcontract under NAICS code 541611, which covers management, scientific, and technical consulting services. The solicitation was posted on April 30, 2026, and responses are due by May 6, 2026, indicating a tightly constrained timeline for execution. The contracting activity originates from the Medical Supply Chain Pharmaceutical FSA, underscoring that the work supports defense healthcare logistics and supply chain integrity. Compliance with NIST SP 800-171 is critical to maintaining eligibility for DoD contracts and ensuring the secure handling of sensitive information.