NIST SP 800-171 Cybersecurity Compliance Implementation

The contract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls for systems handling Controlled Unclassified Information, with a focus on achieving full compliance through a structured self-assessment process, the development of a comprehensive System Security Plan, and the submission of the assessment results to the Supplier Performance Risk System. Efforts must align with all 110 security requirements outlined in NIST SP 800-171 Rev 2, ensuring proper safeguarding of CUI across the entire system environment, including physical, technical, and administrative controls. Documentation must be precise, traceable, and auditable to support government validation and compliance verification. This subcontract is solicited under the NAICS code 541611 for Management Consulting Services and is managed by the Department of Defense through the Medical Supply Chain FSH entity, with performance expected to occur at the FPO military postal address 96322-1400. The solicitation was posted on May 11, 2026, and responses are due by May 18, 2026, with no set-aside designation specified. The work demands experienced cybersecurity professionals capable of interpreting NIST standards, mapping existing controls to requirements, remediating gaps, and producing formal documentation that meets federal compliance standards. All deliverables must be submitted via the DIBBS portal using the provided reference number SPE2DH26T3798.