Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract involves performing a cybersecurity compliance assessment based on the NIST SP 800-171 Revision 1 standard. The scope includes conducting a thorough evaluation of the organization's cybersecurity posture, developing or updating the System Security Plan (SSP) to document security controls and compliance measures, and submitting the assessment findings through the Supplier Performance Risk System (SPRS). This work supports ensuring that the entity meets Department of Defense security requirements related to the protection of controlled unclassified information. The contract is a subcontract opportunity under the North American Industry Classification System (NAICS) code 541611, which pertains to administrative management and general management consulting services. It is posted by the ASC Supplier Operations OEM Division within the Department of Defense, with a posted date of May 10, 2026, and a response deadline of May 18, 2026. Specific location details for work performance and points of contact are not provided. Interested parties can access additional information and submit responses via the linked government procurement portal.