Cybersecurity Compliance Reporting & NIST SP 800-171 Assessment Support

The contract requires comprehensive support for achieving and documenting cybersecurity compliance with NIST Special Publication 800-171 Revision 1, focusing on the collection, preparation, and submission of required compliance data to the Supplier Performance Risk System. This includes accurate reporting of the CAGE code, development and submission of System Security Plan summaries, calculation and reporting of compliance scores, and establishment of realistic target dates to achieve full compliance. All deliverables must align with federal cybersecurity standards and be submitted in a format acceptable to the SPRS system to ensure the contractor’s eligibility for Department of Defense sourcing and contracts. The work is to be performed at Cherry Point, North Carolina, under a subcontract structure issued by the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV. The solicitation was posted on May 11, 2026, with a response deadline of May 19, 2026, and falls under NAICS code 541611 for management, scientific, and technical consulting services. Compliance with NIST SP 800-171 is critical for maintaining access to DoD contracts, and the contractor must ensure all documentation is current, accurate, and verifiable to meet government requirements without delay or discrepancy.