Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contract seeks a subcontractor to support the prime contractor in achieving full compliance with NIST SP 800-171 by meeting a perfect 110 out of 110 score and successfully submitting the assessment through the Supplier Performance Risk System (SPRS). The focus is on ensuring complete documentation of all required security controls related to the protection of Controlled Unclassified Information, with the goal of preparing the prime contractor for CMMC Level 2 certification. This includes conducting assessments, implementing remediation measures, validating control effectiveness, and maintaining auditable records to demonstrate continuous compliance. Work will be performed at Hill Air Force Base, Utah, 84056-5734, under the oversight of the Department of Defense’s ASC Commodities Division. The subcontract is classified under NAICS code 541611, indicating services in administrative management and general management consulting. The opportunity was posted on May 8, 2026, with a mandatory response deadline of May 13, 2026. Success in this engagement directly impacts the prime contractor’s ability to secure and retain Department of Defense contracts requiring secure handling of CUI and adherence to federal cybersecurity standards.