Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract involves conducting a comprehensive assessment for compliance with NIST SP 800-171 standards, focusing on identifying gaps in cybersecurity controls and preparing a detailed System Security Plan (SSP). The contractor is required to submit the assessment results to the Department of Defense's Supplier Performance Risk System (SPRS) in accordance with DFARS clauses 252.204-7019 and 252.204-7020. This work is intended to ensure full alignment with DoD cybersecurity requirements for safeguarding controlled unclassified information. This subcontract, titled "Cybersecurity Compliance Assessment (NIST SP 800-171)," is associated with the ASC Commodities Division of the Department of Defense and is designated under NAICS code 541611, which covers Administrative Management and General Management Consulting Services. The place of performance is New Cumberland, with a specific ZIP code of 17070-5002. Responses to the solicitation must be submitted by May 18, 2026, following its posting on May 13, 2026. The contract supports DoD’s ongoing commitment to enhancing supply chain cybersecurity and risk management practices.