NIST SP 800-171 Cybersecurity Compliance Assessment

The contract involves performing a comprehensive cybersecurity compliance assessment aligned with the NIST SP 800-171 standard. This includes conducting a detailed gap analysis to identify areas where current security measures fall short of the required controls, implementing necessary security controls to address these deficiencies, and preparing all relevant documentation to support submission to the Supplier Performance Risk System (SPRS). The goal is to ensure that the contractor achieves full compliance with NIST SP 800-171 requirements, which are critical for protecting controlled unclassified information. The work is being procured as a subcontract by the Department of Defense's Medical Supply Chain MD SURG FSF office, with the place of performance specified in Williamsburg, Virginia (zip code 23185-5830). The contract falls under NAICS code 541611, which covers administrative management and general management consulting services. The solicitation was posted on May 11, 2026, and responses are due by May 18, 2026, indicating a short turnaround period for interested subcontractors to prepare and submit their proposals. The opportunity details can be accessed via the Department of Defense’s procurement portal.