NIST SP 800-171 Cybersecurity Compliance Support

The contract seeks a subcontractor to support a prime contractor in achieving Department of Defense cybersecurity compliance by developing a comprehensive System Security Plan and conducting a thorough NIST SP 800-171 assessment to ensure proper handling of Controlled Unclassified Information. The work is focused on aligning systems and processes with NIST standards to meet federal requirements for protecting CUI, and the subcontractor will be responsible for delivering detailed documentation and assessment results that validate compliance. This effort is critical for enabling the prime contractor to maintain authorized status when processing, storing, or transmitting sensitive government information. The contract is classified as a subcontract under NAICS code 541618, with performance based in Goose Creek, South Carolina, under the oversight of the Department of Defense through the Medical Supply Chain FSH office. The solicitation was posted on April 30, 2026, and responses are due by May 7, 2026, indicating a short but critical turnaround timeframe. The work is part of a broader initiative to enforce cybersecurity standards across the defense supply chain and requires expertise in NIST frameworks, CUI protocols, and the development of formal security policies and assessments. All deliverables must be precise, auditable, and aligned with current DoD cybersecurity mandates to ensure successful compliance verification.