NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires the performance of comprehensive cybersecurity assessments on information systems to evaluate compliance with the National Institute of Standards and Technology Special Publication 800-171 Revision 1 standards. This includes detailed evaluation of security controls, development and maintenance of system security plans, and submission of assessment results through the Supplier Performance Risk System. The work is focused on ensuring that all applicable NIST controls are properly implemented and documented to meet federal cybersecurity requirements for handling controlled unclassified information. The solicitation is structured as a subcontract under the Department of Defense, specifically for the Medical Supply Chain MD Surg FSF, with performance expected to occur at the FPO location with ZIP code 96675-9600. The North American Industry Classification System code 541611 identifies the work as related to administrative management and general management consulting services. Responses must be submitted by May 5, 2026, and the opportunity was posted on April 29, 2026, with no set-aside designation specified. The contract will be managed through the DIBBS platform, and successful offerors will be responsible for delivering accurate, timely, and auditable compliance documentation to support federal security posture requirements.