Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the execution of a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 Revision 1 to ensure adherence to federal protection standards for controlled unclassified information. The deliverables include detailed documentation of all implemented security controls, the development of a complete System Security Plan, and the formal submission of assessment results to the Supplier Performance Risk System in compliance with DFARS 252.204-7019 and DoD Instruction 5000.79. The assessment must thoroughly evaluate the contractor’s cybersecurity posture against the 110 controls outlined in NIST SP 800-171, identifying gaps and recommending remediation paths where necessary. This subcontract is issued under the Department of Defense with the NAICS code 541611, indicating its classification within management, scientific, and technical consulting services. It was posted on May 11, 2026, with a response deadline of May 19, 2026, and is intended to support an official agency requirement under ASC SUPPLIER OPER AE AND AF DIV. The work scope demands precise alignment with DoD cybersecurity mandates and requires certified expertise in NIST frameworks and DoD regulatory compliance, with no set-aside preferences indicated. All deliverables must be completed and submitted by the deadline to satisfy contractual obligations and maintain eligibility for future DoD engagements.