Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the performance of a cybersecurity compliance assessment aligned with NIST SP 800-171 to ensure proper handling of Controlled Unclassified Information in accordance with DFARS clause 252.204-7012. The successful bidder must conduct a thorough evaluation of security controls, document findings, and submit all required documentation through the Supplier Performance Risk System to demonstrate compliance. This task is critical for maintaining authorized access to Department of Defense information systems and upholding data protection standards for sensitive but unclassified data. The assessment must be completed and submitted by the deadline to meet contractual obligations and avoid potential penalties or loss of contract eligibility. The work is to be performed at Robins Air Force Base, Georgia, under a subcontract arrangement tied to the North American Industry Classification System code 541512 for computer systems design services. The solicitation was posted on July 14, 2026, with a response deadline of July 22, 2026, and is being managed by the ASC Commodities Division under the Department of Defense. All deliverables must meet federal cybersecurity requirements, and the vendor is expected to have proven experience in conducting NIST 800-171 assessments and navigating federal compliance systems. Failure to submit accurate and complete documentation via SPRS will result in non-compliance and may impact future contracting opportunities.