Cybersecurity Compliance and NIST SP 800-171 Implementation

The contract focuses on the implementation and documentation of cybersecurity measures in accordance with NIST SP 800-171 Rev 1, specifically targeting systems that handle Controlled Unclassified Information (CUI). Key responsibilities include ensuring compliance with the standard, completing Supplier Performance Risk System (SPRS) reporting, and developing a Plan of Action and Milestones (POA&M) to address any potential deficiencies. The work will be performed as a subcontract under the Department of Defense's ASC Commodities Division. This opportunity was posted on May 10, 2026, with responses due by May 18, 2026. The place of performance is located in Suffolk, Virginia, with the related NAICS code being 541612, which covers human resources consulting services but here applies to specialized cybersecurity compliance work. The contract does not specify any set-aside type or special organization requirements, indicating a broad eligibility for potential contractors.