Cybersecurity Assessment and Reporting Services

The contract requires the performance of formal cybersecurity assessments aligned with NIST SP 800-171 standards to evaluate compliance across specified controls, with results quantified as a numerical score such as 105 out of 110. These assessments must be conducted with precision and documented thoroughly to support accurate reporting. Submitted results are to be uploaded to the Department of Defense’s Supplier Performance Risk System, ensuring transparency and regulatory adherence. In addition to scoring, the contractor must actively assist in developing and maintaining Plans of Action and Milestones to address any identified deficiencies, providing actionable remediation steps that align with DoD requirements. The work is classified as a subcontract under NAICS code 541618 and is being managed by the Active Devices Division within the Department of Defense. The place of performance is designated as Hill Air Force Base with a ZIP code of 84056-5734, indicating the physical location where the services must be delivered. The solicitation was posted on May 8, 2026, with a strict response deadline of May 13, 2026, leaving a narrow window for submissions. All deliverables must meet federal cybersecurity compliance mandates, and the contractor is expected to have established expertise in NIST frameworks and DoD reporting systems to ensure timely, accurate, and auditable outcomes.