Cybersecurity Compliance and NIST SP 800-171 Assessment Services

The contract seeks third-party services to conduct a comprehensive cybersecurity assessment, system hardening, and documentation effort aimed at achieving full compliance with NIST SP 800-171 requirements. This includes validating controls, implementing necessary technical and procedural safeguards, and preparing all required documentation to support successful SPRS submission. The work also encompasses oversight of subcontractors to ensure their security practices align with federal standards and that all compliance obligations are uniformly met across the supply chain. The assessment must be thorough, methodical, and documented to meet the Department of Defense’s expectations for protecting controlled unclassified information. The services are targeted for performance at Cherry Point, North Carolina, under a subcontract awarded by the ASC Commodities Division. The solicitation was posted on May 10, 2026, with proposals due by May 18, 2026, under NAICS code 541512 for computer systems design services. While no specific set-aside type is indicated, the requirement is explicitly tied to securing defense-related information systems and supporting contractual obligations under federal cybersecurity mandates. Successful bidders will be expected to deliver a fully compliant, auditable posture with demonstrable evidence of control implementation and subcontractor accountability.