Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires the performance of a comprehensive NIST SP 800-171 Rev 1 cybersecurity assessment to ensure compliance with federal security standards for controlled unclassified information. This includes the development and ongoing maintenance of a System Security Plan that documents security controls, policies, and procedural measures aligned with NIST guidelines. The contractor must submit the assessment findings to the Supplier Performance Risk System and is obligated to respond to any identified deficiencies with a formal rebuttal within 14 business days of receiving feedback, demonstrating corrective actions or justifications for existing controls. The work is tied to a subcontract under the Department of Defense, specifically for the ASC Commodities Division, with performance located at Robins Air Force Base, Georgia. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026, under NAICS code 541611 for management consulting services.