Cybersecurity Compliance Assessment & NIST SP 800-171 Gap Analysis

The contract requires a thorough evaluation of information systems to determine adherence to NIST Special Publication 800-171, focusing on identifying gaps, vulnerabilities, and noncompliant controls within the current security posture. The assessment must result in a quantitative score reflecting the organization’s compliance level, such as 105 out of 110 controls met, along with a detailed report that outlines each deficiency, its potential risk impact, and prioritized remediation steps. The deliverables include a comprehensive compliance report and a realistic, actionable timeline for addressing identified shortcomings to achieve full or near-full adherence to the NIST framework. The work is classified as a subcontract under NAICS code 541611 and is managed by the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense, with performance required at a location in New Cumberland, Pennsylvania, ZIP 17070-5002. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026, indicating a narrow window for submission. The effort is critical to ensuring the protection of controlled unclassified information and must be executed with precision to meet federal cybersecurity standards, with outcomes potentially influencing ongoing contractual obligations or eligibility for future DoD work.