NIST SP 800-171 Medium Assessment Services

The contract involves performing medium-level NIST SP 800-171 assessments to evaluate the protection of Controlled Unclassified Information across federal systems. The work requires a comprehensive review of documentation, structured interviews with personnel, and direct evaluation of system configurations to establish a medium level of confidence that CUI safeguards are properly implemented and maintained. These assessments are conducted to ensure compliance with NIST standards specific to non-federal systems handling sensitive government information. The services are provided under a subcontract tied to the Department of Defense through the Defense Logistics Agency, with the North American Industry Classification System code 541611 indicating it falls under management, scientific, and technical consulting services. The task is focused on security posture validation within systems that process, store, or transmit CUI, and the assessments must be thorough enough to support an accurate determination of compliance without requiring the highest level of rigor. The solicitation was posted in July 2026 and the performance location is not specified, suggesting the work may be conducted remotely or across various DOD facilities.