Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires performing thorough assessments in accordance with NIST SP 800-171 standards to evaluate cybersecurity compliance, specifically focusing on safeguarding Controlled Unclassified Information (CUI). This includes conducting assessments across both prime and subcontractor systems, accurately reporting the resulting cybersecurity scores to the Supplier Performance Risk System (SPRS), and ensuring that appropriate CUI protection measures are effectively implemented. The work is designated as a subcontract under the Department of Defense's ASC SUPPLIER OPER OEM DIVISION, with the place of performance at Cherry Point, zip code 28533-5040. The contract, categorized under NAICS code 541512, demands timely responses, with the solicitation posted on May 13, 2026, and proposals due by May 18, 2026. The primary objective is to enhance cybersecurity posture and compliance through systematic evaluation and reporting, thereby supporting defense-related supply chain security initiatives.