Cybersecurity Compliance and NIST SP 800-171 Assessment Support

The contract requires support for conducting NIST SP 800-171 assessments at Medium and High impact levels to ensure compliance with CMMC Level 2 requirements for protecting controlled unclassified information. The work involves evaluating systems and processes against the security controls outlined in NIST SP 800-171, identifying gaps, and implementing remediation measures as needed. All assessment findings must be documented and submitted to the Supplier Performance Risk System to validate cybersecurity readiness and maintain eligibility for DoD contracts. The scope is focused exclusively on cybersecurity compliance activities tied to safeguarding sensitive information and does not include hardware, software procurement, or general IT services. This is a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV, with a solicitation closing on August 27, 2026. The North American Industry Classification System code 541512 indicates the work falls under computer systems design and related services. Performance is expected to support federal cybersecurity mandates without requiring physical presence at a specific location, as no place of performance details are provided. The contracting activity seeks qualified entities capable of delivering accurate, timely assessments that align with federal standards and can be validated through official DoD reporting channels.