Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contract focuses on providing assessment and documentation support to ensure compliance with NIST SP 800-171 and DFARS 252.204-7012 requirements, which are critical standards for safeguarding controlled unclassified information (CUI) within defense-related environments. Key tasks include the evaluation of cybersecurity controls, preparation of compliance documentation, and the submission of information into the Supplier Performance Risk System (SPRS). This work supports the Department of Defense in maintaining rigorous cybersecurity standards across its supply chain. Issued by the ASC Commodities Division of the Department of Defense, the subcontract opportunity pertains to NAICS code 541611, which covers administrative management and general management consulting services. The place of performance for the contract is Phoenix, Arizona, with responses due by May 21, 2026. The contract does not specify any set-aside status or preference, and it is intended to assist the government in meeting mandatory cybersecurity requirements for defense contractors handling controlled unclassified information.