Cybersecurity Assessment Services (NIST SP 800-171 Compliance)

The contract requires the provision of cybersecurity assessment services to evaluate Department of Defense contractors' systems for compliance with NIST Special Publication 800-171 Revision 1. This includes a thorough review of System Security Plans, identification of security control gaps, and the generation of compliance scores based on the 110 required controls. Assessments must result in detailed reporting of findings submitted to the Supplier Performance Risk System to ensure transparency and accountability in meeting federal cybersecurity standards. The work is focused on ensuring contractor systems adequately protect controlled unclassified information in accordance with DoD requirements. The contract is structured as a subcontract under the NAICS code 541611, with performance duties to be carried out at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on May 11, 2026, and responses are due by May 19, 2026. The contracting activity falls under the ASC Supplier Oper OEM Division of the Department of Defense, with no specific set-aside designation applied. All deliverables must align precisely with NIST SP 800-171 Rev 1 criteria, and the assessment outcomes will directly impact the contractor’s compliance standing within the DoD procurement ecosystem.