Cybersecurity Compliance Assessment (NIST SP 800-171 Evaluation)

The contract requires the performance of third-party cybersecurity assessments for contractors managing Controlled Unclassified Information, specifically evaluating compliance with NIST SP 800-171 standards. This includes conducting a detailed gap analysis to identify deficiencies in security controls, reviewing and validating system security plans, and ensuring all findings are accurately documented and submitted to the Supplier Performance Risk System. The assessments must be thorough and aligned with federal cybersecurity requirements to confirm the contractor's ability to protect CUI effectively. The solicitation is issued as a subcontract under the Department of Defense, managed by the ASC SUPPLIER OPER AE AND AF DIV, with performance required at Hill Air Force Base, Utah, ZIP 84056-5734. The opportunity was posted on May 11, 2026, and responses are due by May 19, 2026. The North American Industry Classification System code 541611 indicates the work falls under management consulting services, emphasizing the technical advisory and compliance audit nature of the engagement. All evaluations must meet federal standards and result in actionable, reportable outcomes for DOD oversight purposes.