NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires the performance of a comprehensive cybersecurity compliance assessment for Department of Defense information systems aligned with NIST Special Publication 800-171 Revision 1, focusing on identifying gaps in current security controls, evaluating compliance levels through scoring, and developing a detailed roadmap to achieve full adherence. The assessment must systematically analyze the targeted systems against the 110 security requirements outlined in the NIST framework, prioritizing areas of non-compliance and providing actionable recommendations to close gaps within the specified timeframe. The work is classified as a subcontract under NAICS code 541611, with performance centered at Keesler Air Force Base, Mississippi, where the contractor will be expected to deliver all findings and deliverables by the response deadline of May 18, 2026. The assessment will support the Medical Supply Chain MD Surg FSF, a division of the Department of Defense, ensuring that sensitive defense data and systems meet federal cybersecurity standards. The contract does not specify a set aside type, but all proposals must demonstrate expertise in DoD compliance frameworks, experience with NIST SP 800-171 implementations, and the ability to produce clear, structured compliance documentation suitable for audit and review.