NIST SP 800-171 Cybersecurity Compliance Assessment

A cybersecurity assessment is required to ensure compliance with NIST SP 800-171 Revision 1 for the protection of Controlled Unclassified Information, encompassing the development of system security plans and submission of scores through the Supplier Performance Risk System. The work is part of a subcontract under the Department of Defense, specifically managed by Medical Supply Chain MD Surg FSF, with performance duties to be carried out in San Antonio, Texas, at the zip code 78226. The solicitation was posted on April 30, 2026, and responses must be submitted by May 6, 2026, with the North American Industry Classification System code 541611 indicating it falls under management consulting services. All activities must align with federal cybersecurity standards to safeguard CUI and satisfy reporting obligations tied to supply chain security and risk assessment.