NIST SP 800-171 Cybersecurity Compliance Implementation

This contract focuses on the implementation and documentation of compliance with NIST SP 800-171 standards for systems that handle Controlled Unclassified Information (CUI). The scope includes conducting a thorough self-assessment to establish current security postures, developing a comprehensive System Security Plan (SSP) to outline how security requirements are met, and submitting the necessary documentation to the Supplier Performance Risk System (SPRS). The contract is a subcontract opportunity under the Department of Defense's Medical Supply Chain FSH office, with performance expected at an FPO location with the zip code 96322-1400. The contract was posted on May 11, 2026, with responses due by May 18, 2026. It falls under NAICS code 541611, which covers management consulting services. While there are no set-aside provisions indicated, the focus is on ensuring that contractors handling sensitive information meet stringent cybersecurity requirements as mandated by federal regulations. Interested parties are directed to a specific submission portal to respond to the solicitation, which supports the defense supply chain’s commitment to safeguarding sensitive information through rigorous cybersecurity compliance.