System Security Documentation and Architecture Reporting

The contract requires the preparation of comprehensive system security documentation to support NIST SP 800-171 compliance for Department of Defense contractors, with a focus on architecture descriptions, compliance scoring, and remediation roadmaps. This work is critical for ensuring that systems handling controlled unclassified information meet federal cybersecurity standards, and the deliverables must be precise, actionable, and aligned with the DoD’s regulatory framework. The scope includes documenting technical architectures, evaluating current security posture against NIST controls, and creating detailed plans to close gaps in compliance, all tailored to the needs of a defense-related supply chain environment. The contract is structured as a subcontract under the Medical Supply Chain MD Surg FSF, with performance required at Perry Point, Maryland, zip code 21902. It falls under NAICS code 541611 for management consulting services and has a tight response deadline of May 18, 2026. No set-aside designation is specified, indicating it is open to all eligible subcontractors. The solicitation is issued through the DIBBS platform, and while no point of contact is listed, proposers must ensure their submissions are complete and submitted via the official portal prior to the deadline to be considered.