Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract involves conducting detailed assessments based on the NIST SP 800-171 standards to evaluate the cybersecurity posture of organizations handling Controlled Unclassified Information (CUI). It requires the development of comprehensive System Security Plans (SSP) to document the security controls in place and ensure compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which mandates safeguarding sensitive defense information. The work is structured as a subcontract opportunity hosted by the Department of Defense's ASC SUPPLIER OPER OEM Division, with the place of performance located in New Cumberland, Pennsylvania. This subcontract focuses on cybersecurity compliance services under NAICS Code 541611, which relates to administrative management and general management consulting services. The solicitation was posted on May 12, 2026, with a response deadline of May 20, 2026, indicating a concise timeframe for proposal submissions. While certain details such as points of contact and physical office addresses are not provided, the opportunity is accessible through the given government contracting portal link for interested parties to retrieve more information and participate in the bidding process.