Cybersecurity Compliance Assessment & Reporting (NIST SP 800-171)

The contract requires comprehensive cybersecurity compliance services focused on NIST SP 800-171 standards, including conducting assessments to evaluate adherence, developing detailed System Security Plans, and documenting implementation roadmaps to address identified gaps. All work must be completed in alignment with federal requirements for handling Controlled Unclassified Information, ensuring proper protection and control measures are applied throughout the assessment and reporting lifecycle. Final results must be submitted to the Supplier Performance Risk System to maintain official compliance records. The contractor is also responsible for ensuring flow-down compliance across all subcontractors, meaning they must extend NIST SP 800-171 requirements and oversight to any third-party entities involved in supporting the project. The work is designated as a subcontract under the Department of Defense, specifically tied to the Aviation Supply Chain ESOC Buys organization, with performance required at a location in Sparta, Illinois, with a zip code of 62286-2101. The solicitation was posted on April 29, 2026, and responses are due by May 7, 2026, with the NAICS code 541618 indicating it falls under Other Scientific and Technical Consulting Services.