NIST SP 800-171 Cybersecurity Consulting

This subcontract opportunity, titled NIST SP 800-171 Cybersecurity Consulting, involves providing specialized cybersecurity assessments and Authority to Operate documentation for prime contractors working on U.S. Army medical device projects. The selected provider will be responsible for ensuring system compliance with NIST SP 800-171 standards and supporting Risk Management Framework activities in close coordination with PM M2S personnel. Key technical requirements include the use of cybersecurity auditing tools to validate security controls and the delivery of final compliance certifications. Managed under the Department of Defense through agency W6QK Acc-Apg, the work is designated under NAICS code 541512 and will be performed in Frederick, Maryland. Interested parties must submit their responses by November 3, 2026, to support these critical security initiatives for Army medical systems.