NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires full execution of a NIST SP 800-171 cybersecurity compliance assessment, encompassing a detailed gap analysis to identify deficiencies against required security controls, implementation of those missing or non-compliant controls, and the thorough documentation necessary for submission to the Supplier Performance Risk System. All work must align with federal standards for protecting controlled unclassified information and must result in a completed and validated SPRS submission to demonstrate compliance. The task is structured as a subcontract under the Department of Defense, specifically supporting the Medical Supply Chain MD Surg FSF, with performance location specified in Williamsburg, Virginia, zip code 23185-5830. The solicitation is open for response until May 18, 2026, and the NAICS code 541611 indicates the work falls under administrative management and general management consulting services. Timing is critical, with the solicitation posted on May 11, 2026, requiring prompt engagement from qualified contractors capable of executing end-to-end compliance activities.