NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires conducting a comprehensive cybersecurity assessment to ensure compliance with the NIST SP 800-171 standard, focused on protecting controlled unclassified information. Key tasks include developing a System Security Plan (SSP), performing a Basic Assessment to evaluate current security practices, and submitting the assessment results to the Department of Defense's Supplier Performance Risk System (SPRS). Additionally, the contractor will provide support for potential DoD-led Medium or High assessments, indicating readiness to assist with more rigorous security evaluations if required. The contract is issued as a subcontract by the Department of Defense’s Medical Supply Chain FSH agency, with the primary place of performance designated as FPO (Fleet Post Office), ZIP code 34089, typically representing an overseas military location. The solicitation was posted on May 12, 2026, with a response deadline of May 19, 2026. It falls under NAICS code 541612, which pertains to cybersecurity consulting services, and aims to bolster the security posture of DoD suppliers by ensuring alignment with federal cybersecurity requirements.