NIST SP 800-171 Cybersecurity Compliance Assessment Services

The contract requires the performance of NIST SP 800-171 cybersecurity compliance assessments for systems that handle Controlled Unclassified Information, with the goal of achieving a minimum score of 110 on the Supplier Performance Risk System. This involves evaluating the implementation of security controls, generating accurate scoring results, submitting required data to the SPRS database, and developing detailed Plans of Action and Milestones to address gaps and remediate deficiencies. The work is scoped as a subcontract under the Department of Defense, specifically for the Medical Supply Chain MD Surg FSF, and must be completed in accordance with federal cybersecurity standards for CUI protection. The place of performance is designated as FPO with a zip code of 09590, indicating operations may occur in a military postal location. The solicitation was posted on May 10, 2026, with a firm response deadline of May 18, 2026, and is classified under NAICS code 541611 for computer systems design services. All deliverables must be aligned with the NIST framework to ensure compliance, and contractors are expected to provide thorough documentation and reporting to support audit readiness and continuous improvement of the information security posture for the handling of sensitive government data.