Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the performance of a NIST SP 800-171 compliance assessment to ensure the protection of controlled unclassified information within the designated system. The scope includes the development of a comprehensive System Security Plan and a Plan of Action and Milestones to identify, prioritize, and remediate security gaps. These deliverables must align with federal requirements for safeguarding CUI and demonstrate adherence to the 110 security controls outlined in NIST SP 800-171. The work is to be conducted in support of the Department of Defense through its Fluid Handling Division, with performance located at New Cumberland, Pennsylvania, 17070-5002. The effort is structured as a subcontract under NAICS code 541611 for administrative management and general management consulting services. All proposals must be submitted by August 10, 2026, following the solicitation posted on July 30, 2026, with no set-aside provisions specified.