NIST SP 800-171 Cybersecurity Compliance Assessment

This contract involves conducting cybersecurity compliance assessments based on the NIST SP 800-171 standards, specifically for systems that handle Controlled Unclassified Information (CUI) in accordance with DFARS requirements. The contractor will be responsible for evaluating the security controls, documenting the level of compliance, and submitting the Security Posture Review System (SPRS) scores to ensure that the systems meet federal cybersecurity mandates. Issued by the Department of Defense under the Medical Supply Chain MD Surge FSF office, this subcontract is classified under NAICS code 541611, which covers administrative management and general management consulting services. The place of performance is listed as FPO with ZIP code 96632, and interested parties must respond by May 18, 2026, following the posting date of May 11, 2026. The contract requires specialized knowledge to accurately assess and report compliance status, supporting the DoD's efforts to secure supply chain information systems.