Cybersecurity Assessment & NIST SP 800-171 Compliance Support

The contract involves performing a comprehensive cybersecurity assessment focused on systems that manage Controlled Unclassified Information (CUI). The contractor is required to evaluate existing security controls aligned with the NIST SP 800-171 standards, develop a detailed System Security Plan (SSP), and ensure all findings and documentation are accurately submitted to the Supplier Performance Risk System (SPRS). The work is set to take place primarily at Fort Knox, and is a subcontract opportunity posted by the Department of Defense through the Aviation Supply Chain ESOC BUYS office. Key dates include a posting date of May 11, 2026, and a response deadline of May 19, 2026. The contract falls under the NAICS code 541611, which corresponds to Administrative Management and General Management Consulting Services. This effort aims to enhance the security posture of defense-related supply chain systems by ensuring compliance with federal cybersecurity mandates and effectively managing supplier performance risks.