Cybersecurity Compliance Audit and Reporting

The contract is for an independent cybersecurity compliance audit focused on verifying the full implementation of all 110 NIST SP 800-171 controls within the contractor’s systems. The scope requires a thorough assessment of current cybersecurity practices, documentation review, technical validation, and gap analysis to determine alignment with federal standards. The deliverable is a detailed compliance score report that quantifies adherence to each control and includes specific corrective action recommendations to address any deficiencies identified during the audit process. This subcontract, under NAICS code 541690, is issued by the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION with performance expected at FPO, ZIP 96678. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. The work is critical for ensuring the supplier meets mandatory federal cybersecurity requirements and supports the broader defense supply chain’s integrity. While no set-aside classification is specified, the audit must be conducted by a qualified third party with demonstrated expertise in NIST 800-171 frameworks and defense contractor compliance environments.