NIST SP 800-171 Cybersecurity Compliance Assessment

The contract involves performing a cybersecurity compliance assessment based on the NIST SP 800-171 standards for Department of Defense contractor systems that manage Controlled Unclassified Information (CUI). The scope includes evaluating and documenting the contractor’s security controls, assigning appropriate compliance scores, and submitting the results to the Supplier Performance Risk System (SPRS). This effort supports ensuring that DoD contractors maintain the required protections for sensitive but unclassified information. Issued by the Medical Supply Chain MD SURG FSF under the Department of Defense, the subcontract carries NAICS code 541611, which pertains to administrative management and general management consulting services. The location for the work is Fort Stewart, Georgia, with contract solicitation posted on May 10, 2026, and a response deadline of May 18, 2026. This short turnaround highlights an urgent need to verify contractor adherence to cybersecurity requirements critical for safeguarding defense-related information systems.