Cybersecurity Compliance Assessment (NIST SP 800-171)

This contract requires conducting a comprehensive assessment of the prime contractor's information systems to ensure compliance with NIST SP 800-171 standards, which govern the protection of Controlled Unclassified Information (CUI). The contractor is responsible for evaluating the security controls in place, preparing a detailed System Security Plan (SSP), and submitting the assessment results to the Supplier Performance Risk System (SPRS). The work is designated as a subcontract opportunity under NAICS code 541618 and is associated with the Department of Defense's Aviation Supply Chain office. The place of performance is located in Jacksonville, with the contract posted on May 11, 2026, and responses due by May 19, 2026. This engagement is critical to maintaining cybersecurity compliance within defense-related information systems, ensuring that sensitive government data is properly safeguarded according to federal standards.