Cybersecurity Compliance & NIST 800-171 Self-Assessment Support

The contract seeks a subcontractor to assist the prime contractor in fully completing and submitting the NIST SP 800-171 self-assessment through the Supplier Performance Risk System, ensuring accurate documentation of compliance with all required security controls for protecting controlled unclassified information. This support includes identifying, implementing, and verifying the effectiveness of the 110 security controls outlined in NIST SP 800-171, with a focus on alignment with Department of Defense standards and readiness for audit or review. The work will be performed at the designated place of performance in New Cumberland, Pennsylvania, and must be completed before the response deadline of July 27, 2026. This engagement falls under the NAICS code 541512 for computer systems design services and is structured as a subcontract under the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION. The subcontractor will be expected to work closely with the prime contractor to ensure thorough documentation, timely submission, and full compliance with federal cybersecurity requirements for CUI protection. Although specific performance metrics or deliverables are not detailed, success will be measured by the accurate and complete submission of the self-assessment in SPRS and the establishment of a sustainable compliance posture that meets DoD expectations.