NIST SP 800-171 Cybersecurity Compliance Support

The contract seeks consulting services to support full NIST SP 800-171 cybersecurity compliance for systems handling Controlled Unclassified Information, with a focus on developing and documenting a comprehensive System Security Plan and submitting the required assessment results to the Supplier Performance Risk System. The work must ensure all 110 security controls outlined in NIST SP 800-171 are properly implemented, assessed, and recorded, with clear evidence of compliance applicable to the designated environment. The consultant is expected to guide the organization through each phase of the compliance process, from gap analysis and policy development to ongoing documentation and SPRS submission, ensuring alignment with Department of Defense expectations. The contract is structured as a subcontract tied to the Medical Supply Chain MD Surg FSF under the Department of Defense, with performance required to occur in Williamsburg, Virginia, at the ZIP code 23185-5830. It is categorized under NAICS code 541611 for management consulting services and was posted on May 12, 2026, with responses due by May 18, 2026. There is no specified set-aside status, and all proposals must be submitted through the DIBBS portal using the solicitation number SPE2DS26T068F. The project demands expertise in federal cybersecurity frameworks and experience with CUI handling environments, requiring actionable deliverables that meet stringent DoD audit readiness standards.