Cybersecurity Compliance & NIST SP 800-171 Assessment Support

This contract requires the execution of a comprehensive NIST SP 800-171 assessment to validate compliance with DFARS cybersecurity standards for the protection of Controlled Unclassified Information. The awarded party will be responsible for conducting a thorough evaluation of the organization’s security controls, identifying gaps, and implementing necessary corrective actions to meet federal requirements. Following the assessment, the contractor must prepare and submit the results to the Supplier Performance Risk System to officially document compliance status. The work is tied directly to handling CUI within the scope of Department of Defense operations and must align with the technical and procedural mandates outlined in NIST 800-171. The contract is issued as a subcontract under the NAICS code 541512 for computer systems design services and is performance-based at Cherry Point, NC, with a strict response deadline of May 20, 2026. The effort is critical to maintaining eligibility for DoD contracts and ensuring continued access to sensitive information. All activities must be completed in accordance with federal cybersecurity frameworks, and the final deliverables must be accurate, defensible, and ready for audit. Timely and precise execution is essential to avoid risk to contractual obligations and operational authorization.