Subcontractor NIST Assessment Management

The contract requires comprehensive management and verification of NIST SP 800-171 Basic Assessments for all subcontractors handling Controlled Unclassified Information and Covered Defense Information. This involves ensuring each subcontractor completes the required assessment, validates compliance with NIST security controls, and securely uploads their assessment results to the Supplier Performance Risk System within established deadlines. The scope is strictly focused on maintaining regulatory adherence across the supply chain to protect sensitive defense information and reduce cybersecurity risks. All activities must align with the Department of Defense’s requirements and be conducted in accordance with the specified timeline and procedural standards. The work is to be performed at Camp Pendleton, California, with a response deadline of May 7, 2026, and a posted date of April 30, 2026. It falls under NAICS code 541611, indicating it pertains to management consulting services related to cybersecurity and compliance. The contracting entity is the Medical Supply Chain FSH under the Department of Defense, and this is classified as a subcontract opportunity. While no set-aside designation is specified, the requirement is mission-critical for safeguarding federal information and maintaining the integrity of defense supply chain cybersecurity protocols. All participants must demonstrate proven capability in managing NIST 800-171 assessments and handling SPRS submissions accurately and on time.