Cybersecurity Compliance Assessment (NIST SP 800-171)

This contract requires the execution of a cybersecurity compliance assessment aligned with NIST SP 800-171 Revision 1 to evaluate the safeguarding of controlled unclassified information within a covered system. The work involves a thorough documentation of existing security controls across the target information system, ensuring alignment with the 110 controls outlined in the standard. The assessment must be methodical, covering all applicable security requirements related to access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. The final deliverable includes a completed assessment report to be submitted to the Department of Defense’s Supplier Performance Risk System (SPRS), which serves as the official repository for contractor cybersecurity posture evaluations. Performance is expected at APO, 09227-0000 with a response deadline of May 18, 2026, for a subcontract under the NAICS code 541611 for management, scientific, and technical consulting services.