Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires execution of a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 Revision 1 standards, focusing on achieving a perfect score of 110 out of 110 by evaluating system architecture, identifying gaps, and implementing necessary controls. The work involves documenting the full system architecture in detail to support audit readiness and ensuring all required security controls are properly configured and operational. Findings from the assessment must be formally reported to the Supplier Performance Risk System to validate compliance status and attain full alignment with federal cybersecurity requirements for handling controlled unclassified information. The contract is structured as a subcontract under the Department of Defense’s Aviation Supply Chain initiative, with performance obligations centered at Robins AFB, Georgia, 31098-1887. It is classified under NAICS code 541611, indicating services in management, scientific, and technical consulting with a focus on cybersecurity. The solicitation was posted on April 22, 2026, with a firm deadline for responses on April 30, 2026. No set-aside designation or organizational type specifications are provided, and the primary deliverable is full compliance certification through SPRS submission, requiring precise, documented evidence of adherence to all 110 NIST controls without exception.