Cybersecurity Compliance and Reporting (NIST SP 800-171 / CMMC)

The contract requires the performance of a NIST SP 800-171 Rev 1 cybersecurity assessment to evaluate compliance with controls for protecting covered defense information, followed by the development of a comprehensive System Security Plan that documents policies, procedures, and controls aligned with those requirements. The deliverables must support certification under the Cybersecurity Maturity Model Certification Level 2 and fulfill obligations outlined in DFARS 252.204-7020, with final assessment results submitted to the Department of Defense Supplier Performance Risk System. The work is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at a location in New Cumberland, Pennsylvania, 17070-5002. Responses are due by May 18, 2026, and the effort falls under NAICS code 541611, indicating it involves administrative management and general management consulting services focused on cybersecurity compliance.