Cybersecurity Compliance and NIST SP 800-171 Assessment

This contract requires the implementation, self-assessment, and thorough documentation of NIST SP 800-171 security controls to protect covered defense information, ensuring full compliance with federal cybersecurity standards for contractors working with the Department of Defense. The scope includes achieving and maintaining an accurate SPRS score through rigorous evaluation of control effectiveness and preparing for potential audits by generating complete, traceable evidence of implementation across all required domains. The work must be performed at the designated place of performance in Cherry Point, North Carolina, with all activities focused on establishing a compliant and audit-ready security posture aligned with DoD expectations. The subcontract is open for response until May 21, 2026, and is classified under NAICS code 541611 for management, scientific, and technical consulting services.