Cybersecurity Compliance and NIST SP 800-171 Assessment Support

The contract supports the implementation and documentation of NIST SP 800-171 controls to safeguard Controlled Unclassified Information (CUI) in alignment with DFARS and FAR requirements, ensuring full compliance for defense-related systems and operations. The work is focused on assisting contractors in establishing, testing, and formalizing cybersecurity measures that meet federal standards for protecting sensitive but unclassified data within the Department of Defense supply chain. The solicitation is issued as a subcontract under the NAICS code 541611 for Administrative Management and General Management Consulting Services, with a response deadline of July 21, 2026. Performance is required to take place in New Cumberland, Pennsylvania, under the oversight of the ASC Commodities Division within the Department of Defense. The scope demands thorough assessment, gap analysis, and documentation of security controls, tailored to operational environments handling CUI, with an emphasis on audit readiness and continuous compliance monitoring throughout contract execution.