NIST SP 800-171 Security Assessment Services

The contract solicits services to perform a comprehensive system security assessment aligned with NIST SP 800-171 Revision 1, requiring evaluation of all applicable security controls, detailed documentation of the system architecture, and formal reporting on compliance status. The assessment must ensure that information systems handling controlled unclassified information meet federal cybersecurity requirements, with emphasis on identifying gaps, validating implementation of controls, and providing actionable remediation recommendations. The work is structured as a subcontract under the Department of Defense, specifically for the Medical Supply Chain MD Surg FSF, with performance required in San Antonio, Texas, at the zip code 78226. The solicitation was posted on May 12, 2026, with a strict response deadline of May 18, 2026, indicating a tightly scheduled procurement process. The North American Industry Classification System code 541611 identifies the category as Administrative Management and General Management Consulting Services, underscoring the need for expertise in governance, risk, and compliance frameworks. There is no set-aside designation specified, and the contract does not list a point of contact, suggesting bidders should rely on the official DIBBS portal for additional details. The work requires a high level of technical proficiency in NIST standards and familiarity with DoD environment requirements.