Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires a comprehensive cybersecurity compliance assessment in alignment with NIST SP 800-171 standards for all information systems that handle Controlled Unclassified Information within the prime contractor’s environment. This includes a detailed evaluation of security controls, identification of gaps, and the development of a complete System Security Plan that documents policies, procedures, and implementation strategies to meet the required federal safeguards. The assessment must be thorough, covering all applicable controls and ensuring alignment with current NIST guidelines to safeguard CUI from unauthorized access, disclosure, or modification. Upon completion of the assessment and SSP development, all findings and documentation must be formally submitted to the Supplier Performance Risk System to demonstrate compliance with Department of Defense cybersecurity requirements. The work is scoped to be performed in support of the Aviation Supply Chain under the Department of Defense, with performance centered in Jacksonville, Florida, 32212-0103. The solicitation is issued as a subcontract under NAICS code 541618, and responses are due by May 19, 2026, with the opportunity posted on May 11, 2026. The prime contractor is expected to deliver actionable, auditable results that validate adherence to federal cybersecurity standards and enable continued eligibility for DoD contracting.