Cybersecurity Compliance Assessment (CMMC/NIST SP 800-171)

A cybersecurity compliance assessment is required for systems handling Controlled Unclassified Information, focusing on adherence to NIST SP 800-171 Rev 1 and CMMC Level 2 requirements. The scope includes conducting a detailed gap analysis to identify deficiencies in current security controls, reviewing the System Security Plan to ensure completeness and alignment with federal standards, and preparing and submitting an accurate SPRS evaluation to reflect compliance status. The work must be performed in accordance with the specific guidelines of these frameworks to ensure the organization meets the Department of Defense’s cybersecurity expectations for protecting CUI. The contract is structured as a subcontract under the ASC Commodities Division of the Department of Defense, with performance required at the New Cumberland location, zip code 17070-5002. It falls under NAICS code 541611, indicating it is a management consulting services assignment. The solicitation was posted on April 29, 2026, and responses are due by May 4, 2026. All deliverables must be completed promptly and accurately to satisfy contractual obligations, with emphasis on technical precision and compliance documentation to support CMMC Level 2 certification readiness.