Cybersecurity Assessment and NIST SP 800-171 Compliance Implementation

The contract requires the execution of comprehensive cybersecurity assessments to ensure compliance with NIST SP 800-171 Rev. 1 and the achievement of CMMC Level 2 certification. This includes performing a detailed gap analysis to identify deficiencies in current security controls and developing a fully compliant System Security Plan that documents policies, procedures, and implementation strategies. The work is focused on strengthening the protection of controlled unclassified information within the contractor’s systems to meet federal cybersecurity standards. Performance of all tasks must be carried out at Hill Air Force Base, Utah, with a response deadline of May 21, 2026. The contract is structured as a subcontract under NAICS code 541611 and falls under the jurisdiction of the Department of Defense, specifically the ASC SUPPLIER OPER AE AND AF DIV. While no set-aside designation is specified, the requirement demands specialized expertise in cybersecurity frameworks and documentation necessary for CMMC validation, making it critical to demonstrate proven experience in NIST compliance and assessment methodologies.