Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the execution of cybersecurity compliance assessments aligned with NIST Special Publication 800-171 to ensure the protection of Controlled Unclassified Information (CUI) within the Department of Defense’s supply chain. The contractor will be responsible for conducting thorough evaluations of existing security controls, developing comprehensive System Security Plans (SSPs) that document control implementation and risk management strategies, and supporting accurate and timely reporting through the Supplier Performance Risk System (SPRS). These activities are critical to achieving and maintaining compliance with federal cybersecurity standards for organizations handling CUI on behalf of the DoD. The work is classified as a subcontract under NAICS code 541611, with performance expected to occur in Phoenix, Arizona, within the zip code 85043. The solicitation was posted on May 12, 2026, and responses must be submitted by May 26, 2026. The contracting organization is C AND T SUPPLY CHAIN, operating under the Department of Defense, and the effort is focused on strengthening cybersecurity posture across defense contractors by ensuring formal adherence to NIST 800-171 requirements. All deliverables must support continuous compliance oversight and readiness for DoD audits or assessments.