Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the performance of comprehensive cybersecurity compliance assessments for information systems in alignment with NIST Special Publication 800-171 Revision 1, focusing on identifying gaps in security controls, documenting system configurations and policies, and submitting findings through the Supplier Performance Risk System. The work involves evaluating existing controls against the NIST framework to ensure alignment with federal cybersecurity requirements for safeguarding controlled unclassified information, with an emphasis on accurate and timely reporting to meet regulatory obligations. All assessments must result in detailed documentation that supports transparency, remediation planning, and audit readiness. This is a subcontract under the Department of Defense, issued by the ASC SUPPLIER OPER OEM DIVISION, with a posting date of May 10, 2026, and a response deadline of May 18, 2026. The North American Industry Classification System code 541611 indicates the work falls under management, scientific, and technical consulting services, specifically within cybersecurity consulting. The place of performance and point of contact details are not specified, but the work is expected to be conducted remotely or at the contractor’s facility, with all deliverables submitted electronically via the DIBBS platform using the provided solicitation number SPE4A526T127C.