Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contractor will support the prime in achieving full compliance with DFARS 252.204-7012 and 252.204-7020 by performing a comprehensive NIST SP 800-171 assessment of the information systems handling controlled unclassified information. This includes developing a detailed System Security Plan that documents policies, procedures, and controls aligned with NIST standards to protect sensitive data. The deliverables will also encompass a roadmap outlining specific actions, timelines, and resources required to achieve a perfect score of 110 on the DoD Supplier Performance Risk System. All results and documentation must be submitted through the DoD SPRS portal to demonstrate compliance status and progress toward full adherence. The work is performed as a subcontract under the Department of Defense, specifically for the ASC Commodities Division, with performance located at Robins Air Force Base, Georgia. The task falls under NAICS code 541611 for management consulting services and is tied to a solicitation issued on May 8, 2026, with responses due by May 13, 2026. The contractor must ensure all activities directly contribute to the prime’s ability to meet DoD cybersecurity requirements and maintain eligibility for defense contracts involving controlled unclassified information. Timely delivery of the assessment, SSP, and compliance roadmap is critical for the prime’s continued contractual standing and risk mitigation.