Cybersecurity Compliance Assessment and Reporting

The contract requires the performance of a cybersecurity compliance assessment aligned with NIST SP 800-171 to evaluate adherence to requirements for protecting Controlled Unclassified Information within the Department of Defense environment. The scope includes a full evaluation of the contractor’s systems and processes to determine readiness and compliance, resulting in the submission of a completed System Security Plan, a detailed assessment report, and a SPRS posting if the final score meets or exceeds a Medium risk level. The assessment must be conducted in accordance with federal cybersecurity standards to ensure CUI is handled securely and in alignment with DoD mandates. Performance is to be carried out in support of the ASC SUPPLIER OPER OEM DIVISION at Hill AFB, Utah, with the contract issued as a subcontract under NAICS code 541611 for cybersecurity consulting services. Proposals are due by April 30, 2026, following a solicitation posted on April 22, 2026. Successful bidders will be expected to deliver all documentation and reporting outputs in a timely and accurate manner, with SPRS posting being mandatory for Medium or High scores, ensuring transparency and accountability within the Defense Federal Acquisition Regulation Supplement framework.