NIST SP 800-171 Cybersecurity Compliance Assessment

A cybersecurity assessment is required to verify compliance with NIST SP 800-171 Rev 1 for Department of Defense contracts, focusing on the evaluation of existing security controls across systems handling controlled unclassified information. The assessment must result in a comprehensive System Security Plan that documents how each control is implemented or mitigated, ensuring alignment with federal standards for protecting sensitive data. This includes identifying gaps, recommending remediation actions, and validating that all security measures are properly documented and operational. The contractor is also responsible for accurately reporting assessment outcomes through the Supplier Performance Risk System, ensuring that the organization's cybersecurity posture is reflected in official DoD records. The work is structured as a subcontract under NAICS code 541611, with a solicitation posted on May 10, 2026, and responses due by May 18, 2026. The work is performed under the Medical Supply Chain Pharm FSA, part of the Department of Defense, and requires full adherence to NIST guidelines to meet contractual obligations for securing information systems used in defense-related supply chain activities.