NIST SP 800-171 Cybersecurity Compliance Assessment

The contract involves performing a cybersecurity assessment on an information system that supports a Department of Defense (DoD) contract, with the primary objective of evaluating compliance with NIST SP 800-171 Rev 1 standards. This assessment focuses on ensuring proper safeguarding of Controlled Unclassified Information (CUI) in accordance with government requirements. The contractor is also responsible for reporting findings through the Supplier Performance Risk System (SPRS), which is critical for maintaining transparency and accountability in defense-related cybersecurity practices. Issued by the Medical Supply Chain MD SURG FSF under the Department of Defense, the subcontract falls under NAICS code 541611 and is to be executed at Fort Leonard Wood, Missouri (ZIP 65473-8952). The solicitation was posted on May 13, 2026, with a response deadline of May 19, 2026, indicating a short window for submission. No specific set-aside types or organization preferences are noted. The contract is aimed at qualified entities capable of conducting thorough cybersecurity assessments compliant with federal standards to support the integrity of DoD information systems.