NIST SP 800-171 Cybersecurity Compliance Assessment

The contractor is required to conduct a comprehensive cybersecurity assessment of their information systems against the National Institute of Standards and Technology Special Publication 800-171 requirements, which govern the protection of controlled unclassified information in nonfederal systems. This assessment must systematically evaluate all relevant controls, identify gaps in compliance, assign scores based on adherence levels, and produce detailed documentation suitable for submission to the Supplier Performance Risk System. The work must be performed with precision to meet federal standards and support the Department of Defense’s mission of securing sensitive data within its supply chain. The contract is a subcontract under the Medical Supply Chain MD Surg FSF, with performance taking place in Marinette, Wisconsin, at the specified zip code. The solicitation was posted on April 30, 2026, with a firm deadline for response on May 6, 2026. The North American Industry Classification System code 541611 indicates the work falls under management consulting services, reflecting the advisory and evaluative nature of the engagement. All deliverables must align precisely with federal cybersecurity compliance protocols and be structured to enable accurate reporting in SPRS, ensuring the contractor’s posture is properly documented and validated for ongoing DoD contractual obligations.