Cybersecurity Compliance and NIST SP 800-171 Assessment

This contract involves the implementation, self-assessment, and thorough documentation of NIST SP 800-171 security controls aimed at protecting covered defense information. The scope includes preparing for audit readiness and managing Supplier Performance Risk System (SPRS) scoring, ensuring that all cybersecurity measures comply with Department of Defense standards. The work is classified as a subcontract under NAICS code 541611 and is issued by the ASC Supplier Operations OEM Division of the Department of Defense. The contract's place of performance is Cherry Point, with a zip code of 28533-5040, and responses are due by May 21, 2026. The primary objective is to assist the DoD in meeting cybersecurity compliance requirements by evaluating current controls, identifying gaps, and producing documentation that supports regulatory and audit processes. This effort is essential for contractors handling sensitive defense-related information to maintain eligibility and demonstrate readiness for government cybersecurity audits.