Cybersecurity Compliance Assessment & Reporting

The contract requires conducting a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 Rev 1 to evaluate the protection of Controlled Unclassified Information across systems and environments. This includes a detailed review of existing cybersecurity controls, validation of implementation effectiveness, and the preparation of thorough system architecture documentation to support the assessment findings. The contractor must also generate and submit a System Performance and Risk Scorecard report through the Supplier Performance Risk System to ensure alignment with Department of Defense requirements for CUI protection. The work is classified as a subcontract under NAICS code 541612 and is associated with the ASC Commodities Division of the Department of Defense. The place of performance is designated as New Cumberland, PA, with a zip code of 17070-5002. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. All activities must be completed in accordance with federal cybersecurity standards, with deliverables focused on accuracy, completeness, and regulatory compliance to support the agency’s ongoing security posture and adherence to federal mandates.