Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires a formal cybersecurity assessment of the prime contractor’s information systems to validate compliance with NIST Special Publication 800-171 and to support attainment of CMMC Level 2 certification through an accredited C3PAO. The work involves evaluating the contractor’s policies, procedures, and technical controls to ensure alignment with federal cybersecurity requirements for protecting controlled unclassified information. The assessment must be conducted by a qualified third-party organization with C3PAO accreditation, employing standardized methodologies to identify gaps, document findings, and provide remediation guidance necessary to achieve certification. Performance is to occur at Hill AFB with a zip code of 84056-5734, and the solicitation falls under NAICS code 541512 for computer systems design services. The opportunity is structured as a subcontract, with responses due by August 17, 2026. The contracting activity is under the Department of Defense’s Fluid Handling Division, indicating this effort supports a defense-related program requiring stringent cybersecurity controls. The successful bidder must demonstrate proven experience in NIST 800-171 assessments and CMMC Level 2 certification support, ensuring the prime contractor meets all mandated security benchmarks without delay or compromise.