NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a comprehensive assessment of NIST SP 800-171 Rev 1 compliance focused on protecting Controlled Unclassified Information, with the explicit goal of achieving a perfect 110 out of 110 score. This involves a thorough evaluation of all security controls outlined in the framework, identification of any gaps or deficiencies, and the development of a detailed Plan of Action and Milestones to address outstanding issues. The assessment must culminate in a formal submission to the Supplier Performance Risk System to officially document and validate full compliance. The work is to be performed under a subcontract structure, with the primary place of performance located in San Antonio at ZIP code 78226. The solicitation was posted on May 12, 2026, and responses are due by May 18, 2026, under NAICS code 541611 for management, scientific, and technical consulting services. The contracting entity is the Department of Defense through the Medical Supply Chain MD Surg FSF, and the effort is critical to meeting federal cybersecurity requirements for handling CUI. Success hinges on precision in control evaluation, timely remediation planning, and flawless submission to the SPRS system to secure the maximum score.