Cybersecurity Compliance Assessment Services

The contract requires the contractor to perform comprehensive cybersecurity compliance assessments of their information systems in accordance with NIST SP 800-171 Rev 1 standards, ensuring all required security controls are properly implemented and documented. This includes developing detailed System Security Plans that outline the organization's approach to protecting controlled unclassified information, conducting internal evaluations to determine compliance levels, and assigning accurate assessment scores based on the effectiveness of implemented controls. All results must be formally submitted to the Supplier Performance Risk System to maintain transparency and accountability in defense supply chain cybersecurity posture. The work is scoped as a subcontract under the Department of Defense’s ASC Commodities Division, with performance requirements centered around a military postal address in FPO with ZIP code 09523. The solicitation was posted on May 10, 2026, with responses due by May 18, 2026, and is classified under NAICS code 541611 for management, scientific, and technical consulting services. There is no set-aside designation specified, and participation is open to any qualified entity capable of meeting NIST SP 800-171 Rev 1 compliance requirements and reporting obligations through the SPRS platform.