CYBERSECURITY COMPLIANCE & NIST SP 800-171 ASSESSMENT

This contract involves a subcontract to perform a comprehensive cybersecurity assessment in line with NIST SP 800-171 Revision 1 requirements. The primary tasks include evaluating the implementation of required security controls, developing a System Security Plan (SSP) that outlines compliance measures, and submitting the assessment results to the Supplier Performance Risk System (SPRS). Additionally, the contract requires thorough documentation to verify compliance status and includes reporting tied to the entity's CAGE code. The work is to be conducted for the Aviation Supply Chain ESOC BUYS under the Department of Defense, with the place of performance specified as Cherry Point, Virginia (zip code 28533-0071). The contract was posted on May 10, 2026, and responses must be submitted by May 18, 2026. It falls under the NAICS code 541618, which pertains to management consulting services, emphasizing specialized knowledge in cybersecurity compliance within a defense supply chain context.