Cybersecurity Compliance and NIST SP 800-171 Assessment Support

This contract supports the implementation and assessment of NIST SP 800-171 controls designed to safeguard Controlled Unclassified Information within federal systems. The work involves developing and refining a System Security Plan and Plan of Action and Milestones to document security posture, remediation efforts, and compliance timelines. A key deliverable is the submission of assessment results to the Supplier Performance Risk System to ensure alignment with Department of Defense cybersecurity requirements. The effort is focused on helping contractors meet mandatory federal standards for protecting sensitive data through structured compliance activities and continuous monitoring. The solicitation is classified as a subcontract under NAICS code 541512 for other computer-related services and is issued by the Strategic Acquisition Program Directorate within the Department of Defense. Responses are due by May 13, 2026, with the opportunity posted on May 8, 2026. Performance location and specific point of contact details are not provided, and no set-aside status is indicated. All work must be conducted in accordance with the technical and compliance specifications outlined in NIST SP 800-171, with emphasis on accurate documentation, timely reporting, and validation of security controls through formal assessment processes.