Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the performance of a comprehensive NIST SP 800-171 cybersecurity assessment to evaluate compliance with federal standards for protecting Controlled Unclassified Information. This includes the development of a complete System Security Plan that documents policies, procedures, and controls aligned with NIST requirements. All findings and documentation must be submitted to the Supplier Performance Risk System to ensure official recordkeeping and compliance verification. The contractor must also ensure proper flow-down of CUI requirements to all subcontractors and relevant parties, maintaining accountability across the supply chain. The work is classified as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance taking place at an FPO address with ZIP 96666. The solicitation was posted on May 11, 2026, and responses are due by May 19, 2026, under NAICS code 541611 for management, scientific, and technical consulting services.