Cybersecurity Compliance Assessment and Documentation

The contract requires a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 Rev 1 standards, focusing on the evaluation of systems handling controlled unclassified information. The successful vendor must develop a full System Security Plan that documents control implementation and a detailed Plan of Action and Milestones to address any gaps or deficiencies identified during the assessment. All deliverables must be submitted to the Supplier Performance Risk System with a minimum achieved score of 110, ensuring the organization meets or exceeds federal cybersecurity requirements. The work is scoped as a subcontract under the Department of Defense, with performance centered at Fort Campbell, Kentucky, and must be completed under a tight five-day response window starting July 24, 2026. The effort is governed under NAICS code 541611, indicating it involves administrative management and general management consulting services tied to cybersecurity.