NIST SP 800-171 Cybersecurity Compliance Assessment Services

The contract requires the performance of comprehensive cybersecurity assessments to ensure compliance with NIST SP 800-171 Rev 1, focusing on the evaluation of security controls, identification of gaps, and preparation of detailed reporting through the Supplier Performance Risk System. The work involves reviewing existing cybersecurity practices against the mandated standards, analyzing deficiencies, and delivering actionable findings to support implementation of necessary corrective measures. All deliverables must be submitted via SPRS to meet federal reporting requirements and ensure proper documentation of compliance status. This subcontract is issued under the NAICS code 541611 for Management, Scientific, and Technical Consulting Services, with the place of performance located in San Antonio, Texas. The solicitation was posted on April 30, 2026, and responses are due by May 7, 2026. The contracting organization is the Medical Supply Chain FSH under the Department of Defense, indicating the work is tied to defense-related supply chain security objectives. While specific details on set-aside status or point of contact are not provided, the timeframe and location suggest urgency and a targeted need for qualified contractors to support defense cybersecurity posture enforcement.