Cybersecurity Assessment and NIST SP 800-171 Compliance

The contract involves conducting a comprehensive cybersecurity assessment based on NIST SP 800-171 standards, specifically targeting compliance requirements for protected information systems. The contractor is responsible for evaluating system architecture and existing controls, then preparing a detailed compliance summary that will be submitted to the Supplier Performance Risk System (SPRS). This ensures that the assessed systems meet the Department of Defense cybersecurity requirements. This subcontract opportunity was posted on May 22, 2026, with a response deadline of May 28, 2026. It falls under the NAICS code 541611, which signifies management consulting services. The contract is managed by the Active Devices Division of the Department of Defense, with the performance location set in New Cumberland, Pennsylvania, ZIP code 17070-5002. The contract does not specify set-aside classifications or detailed organization types but requires expertise in cybersecurity assessments aligned to federal standards.