Cybersecurity Compliance and NIST SP 800-171 Assessment Support

The contract requires performing a NIST SP 800-171 cybersecurity compliance assessment to evaluate an organization’s adherence to federal security requirements for protecting controlled unclassified information. The successful bidder must conduct a thorough review of systems and controls, compile a summary score reflecting compliance status, and submit the findings to the Supplier Performance Risk System (SPRS) as mandated by Department of Defense protocols. The work is centered on ensuring alignment with NIST standards and must be completed with precision to support ongoing contractual obligations with federal entities. Support is also expected if a rebuttal is needed following the assessment submission, requiring the contractor to respond to any discrepancies, provide additional documentation, or clarify findings to maintain or improve the organization’s SPRS score. The task is classified as a subcontract under NAICS code 541611, with performance taking place in New Cumberland, Pennsylvania, under the oversight of the ASC Supplier Oper OEM Division within the Department of Defense. Proposed responses must be submitted by May 7, 2026, with no set-aside designation and no specific point of contact provided for inquiries.