Cybersecurity Assessment & NIST SP 800-171 Compliance Support

This contract requires the performance of a comprehensive cybersecurity assessment specifically focused on systems that handle Controlled Unclassified Information, with the goal of ensuring compliance with NIST SP 800-171 standards. The work involves a detailed evaluation of existing security controls, identification of gaps, and the development of a complete System Security Plan that documents how security requirements are implemented or mitigated. The assessment must be thorough enough to support federal compliance obligations and must result in submitted documentation that accurately reflects the current security posture of the covered systems. All deliverables are to be formally reported through the Supplier Performance Risk System to ensure transparency and accountability within the Department of Defense supply chain. The contract is structured as a subcontract under the Department of Defense's Aviation Supply Chain ESOC Buys office, with performance required at Fort Knox, Kentucky, 40121-5000. It falls under the NAICS code 541611 for Management, Scientific, and Technical Consulting Services, indicating a professional services engagement focused on advisory and remediation tasks rather than hardware or software procurement. The opportunity was posted on May 11, 2026, with a strict response deadline of May 19, 2026, suggesting a time-sensitive need for qualified vendors capable of delivering actionable cybersecurity documentation promptly. No set-aside provisions are specified, and the solicitation is accessible via the DIBBS platform, indicating it is part of a broader Defense Logistics Agency procurement ecosystem.