Cybersecurity Compliance Assessment and Reporting

The contract requires the performance of comprehensive cybersecurity compliance assessments aligned with NIST Special Publication 800-171 for systems processing Controlled Unclassified Information. This includes developing detailed System Security Plans, evaluating existing security controls, and generating accurate compliance scores that must be submitted to the Supplier Performance Risk System. The work also involves creating structured remediation roadmaps to address identified gaps and ensure full adherence to federal cybersecurity standards. All deliverables must reflect current NIST guidelines and support the contractor’s obligation to maintain CUI in accordance with federal requirements. The contract is a subcontract issued under the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV, with performance expected to take place in New Cumberland, Pennsylvania, at the zip code 17070-5002. The North American Industry Classification System code is 541611, indicating it falls under management consulting services, specifically in the cybersecurity compliance domain. The solicitation was posted on May 13, 2026, with responses due by May 21, 2026, and is accessible via the DIBBS platform. Although no set-aside type is specified, the effort is focused on supporting defense supply chain security through rigorous assessment and documentation processes.