Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contract seeks support for cybersecurity compliance with NIST SP 800-171 and DFARS 252.204-7012 requirements, focusing on the assessment and documentation necessary to safeguard controlled unclassified information within the Department of Defense supply chain. The provider will be responsible for conducting evaluations to ensure systems and processes meet the mandated security controls, preparing detailed documentation, and submitting assessments to the Supplier Performance Risk System to demonstrate compliance. This effort is critical to maintaining the integrity and security of sensitive data handled by contractors working with the ASC Commodities Division. The work is to be performed at a location in Phoenix, Arizona, with a zip code of 85043, and is structured as a subcontract under NAICS code 541611, which pertains to management, scientific, and technical consulting services. The solicitation was posted on May 13, 2026, with responses due by May 21, 2026. While no set-aside status or point of contact is specified, the urgency of the deadline and the technical nature of the requirements indicate a need for experienced cybersecurity professionals capable of delivering accurate, timely compliance documentation aligned with federal defense standards.