NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a thorough evaluation of a contractor’s information system to determine adherence to the cybersecurity controls outlined in NIST Special Publication 800-171, focusing on the implementation and effectiveness of these safeguards to protect controlled unclassified information. The assessment will involve a detailed review of policies, procedures, technical configurations, and operational practices to identify gaps, vulnerabilities, and areas of noncompliance, culminating in a formal report that documents the current security posture and overall compliance status. Findings must be presented with sufficient detail to support remediation efforts and provide actionable recommendations. This subcontract is issued under the NAICS code 541611, associated with management consulting services, and is managed by the Department of Defense through the Medical Supply Chain MD Surg FSF office. The solicitation was posted on May 10, 2026, with a response deadline of May 18, 2026, indicating a tight turnaround for submission. There is no set-aside designation specified, suggesting open competition among qualified vendors. The performance location and point of contact details are not provided, and the primary reference for submission is the DIBBS platform, where interested parties must access and respond to the request for quotation under the identifier SPE2DS26T061R.