NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a comprehensive NIST SP 800-171 cybersecurity compliance assessment for systems handling Controlled Unclassified Information, focusing on the evaluation of all required security controls to ensure alignment with federal standards. This includes the development of a detailed System Security Plan that documents the implementation and management of these controls, as well as the submission of a Basic Assessment through the Supplier Performance Risk System to validate compliance. The assessment must be conducted with rigor to meet DoD requirements and support the integrity of information systems within the Medical Supply Chain FSH network. The engagement is structured as a subcontract under a solicitation issued by the Department of Defense, with a response deadline of May 6, 2026, and a performance location identified as APO with zip code 09094-3215. The work falls under NAICS code 541611, indicating it pertains to administrative management and general management consulting services, specifically targeting cybersecurity advisory and compliance functions. All deliverables must be completed in accordance with NIST guidelines, and the contractor is expected to demonstrate proven expertise in CUI protection, assessment methodologies, and SPRS reporting to satisfy contractual obligations.