Cybersecurity Compliance Assessment

This contract involves performing comprehensive assessments of system security plans to verify adherence to the NIST SP 800-171 Rev 1 standard for protecting Controlled Unclassified Information (CUI). The scope includes evaluating the security measures in place, producing assessment scores reflecting compliance status, documenting the Commercial and Government Entity (CAGE) codes related to the entities assessed, and providing risk ratings to identify potential vulnerabilities and areas requiring mitigation. The contract is a subcontract opportunity issued by the Department of Defense's ASC Commodities Division. The work is to be performed in New Cumberland, with a postal code of 17070-5002. It falls under the NAICS code 541512, which pertains to computer systems design services. The solicitation was posted on May 13, 2026, and responses are due by May 18, 2026, indicating a short turnaround period for submissions. This effort supports the government’s objective of ensuring contractor systems meet stringent cybersecurity standards necessary for safeguarding sensitive information.