Cybersecurity Compliance (NIST SP 800-171) Assessment Support

The contract focuses on providing support for compliance assessment with NIST SP 800-171 standards and assistance with the Supplier Performance Risk System (SPRS) submission, specifically for handling Controlled Unclassified Information (CUI). It is a subcontract under the category of cybersecurity compliance services, aligned with NAICS code 541512, which pertains to computer systems design services. The contract is issued by the Department of Defense through the Aviation Supply Chain ESOC BUYS office, with the place of performance located in Norfolk, Virginia. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. While the contract type is not further specified, it does not indicate any particular set-aside status. The work will support the Department of Defense in ensuring that contractors maintain the required cybersecurity posture to protect sensitive yet unclassified information by assessing compliance and managing relevant risk submissions. The contract highlights the critical need for expertise in both regulatory adherence and risk reporting systems within a defense supply chain context.