Cybersecurity Compliance and NIST SP 800-171 Assessment

This contract involves conducting either a self-assessment or a third-party evaluation of information systems to ensure compliance with the NIST SP 800-171 Revision 1 cybersecurity standards. The contractor is responsible for documenting all findings and submitting the results through the Supplier Performance Risk System (SPRS). If necessary, a Plan of Action and Milestones (POA&M) must also be included to address any identified deficiencies. The work is to be performed as a subcontract under NAICS code 541611, which pertains to administrative management and general management consulting services. The contract is issued by the ASC Supplier Oper OEM Division of the Department of Defense, with the place of performance designated at Hill Air Force Base, ZIP code 84056-5734. The solicitation was posted on May 13, 2026, with a response deadline set for May 21, 2026. While specific details such as agency office address and point of contact are not provided, the contract’s purpose clearly centers on ensuring cybersecurity compliance through rigorous assessment and proper reporting to meet defense industry standards.