Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires third-party cybersecurity assessments aligned with NIST SP 800-171 Rev 1 to evaluate compliance controls, review system security plans, and develop a detailed timeline for achieving and reporting compliance to the Department of Defense. The scope encompasses a thorough assessment of security controls defined in the NIST framework, ensuring all systems and processes meet the required standards for handling controlled unclassified information within DoD contracts. The vendor must deliver actionable findings, identify gaps in current security posture, and provide a structured roadmap for remediation and documentation to satisfy federal reporting obligations. This subcontract is issued by the ASC Commodities Division under the Department of Defense and is designated under NAICS code 541611 for management, scientific, and technical consulting services. The place of performance is designated as FPO with ZIP code 96675, indicating operations may involve overseas or mobile military locations. The solicitation was posted on May 10, 2026, with a strict response deadline of May 18, 2026, signaling a tight turnaround for qualified contractors to submit proposals. No set-aside classification is specified, allowing any eligible third-party vendor to respond, and all submissions must be made through the DIBBS platform linked in the solicitation.