NIST SP 800-171 Security Assessment and SPRS Submission Support

The contract requires the performance of a comprehensive NIST SP 800-171 security assessment to evaluate compliance with federal cybersecurity requirements for protecting controlled unclassified information. The work includes identifying gaps in current security controls, documenting detailed findings, calculating a summary compliance score, and formally submitting the results to the Supplier Performance Risk System. In addition to assessment and reporting, the contractor must develop a structured remediation plan outlining actionable steps to address any unmet controls, ensuring alignment with NIST standards and readiness for future audits. The assessment must be completed and submitted by the response deadline of May 18, 2026, with performance centered at the location in Gastonia, North Carolina, 28054-0000. This is a subcontract under the NAICS code 541611, issued by the Department of Defense through the Medical Supply Chain Pharm FSA, and is part of a broader effort to enforce cybersecurity posture across the defense supply chain. The contractor is expected to deliver accurate, traceable documentation that meets federal reporting standards and supports the government’s objective of maintaining a secure and resilient vendor ecosystem. All deliverables must be submitted in accordance with SPRS requirements, and the remediation plan must be pragmatic, prioritized, and feasible for implementation by the covered organization. The solicitation closed on May 18, 2026, and the work is bound to the terms associated with the subcontract nature of this engagement.