Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires performing a comprehensive NIST SP 800-171 assessment to evaluate cybersecurity practices related to safeguarding Controlled Unclassified Information (CUI). The selected subcontractor must develop a detailed System Security Plan (SSP) to document the current security posture and remediation efforts. Additionally, the results of the assessment and the SSP must be submitted to the Supplier Performance Risk System (SPRS), ensuring compliance with DoD cybersecurity requirements. A critical component of the contract is to verify and enforce the proper flow-down of CUI protections throughout all subcontractor and supplier tiers. This opportunity is posted by the Department of Defense’s ASC Commodities Division and falls under NAICS code 541611, which pertains to administrative management and general management consulting services. The place of performance is designated as FPO with the zip code 96666. The solicitation was posted on May 11, 2026, with a response deadline on May 19, 2026. The contract is issued as a subcontract, focusing on maintaining cybersecurity compliance aligned with federal standards to protect sensitive information within the defense supply chain.