Cybersecurity Compliance Support (NIST SP 800-171 Assessment & Reporting)

The contract requires comprehensive cybersecurity compliance support focused on NIST SP 800-171 Revision 1, specifically to assess an information system’s adherence to controls designed to protect Controlled Unclassified Information CUI. The scope includes conducting a full assessment of the current security posture against the NIST framework, developing a detailed System Security Plan that documents policies, procedures, and control implementation, and formally reporting the findings and compliance status to the Department of Defense Supplier Performance Risk System. The work must ensure the organization meets federal requirements for handling CUI and demonstrates readiness for DoD contract obligations. The contract is a subcontract under the Department of Defense with the performing organization located in Williamsburg, Virginia, identified by NAICS code 541611 which corresponds to management consulting services. The solicitation was posted on May 11, 2026, with a response deadline of May 18, 2026, indicating a short turnaround for proposers to demonstrate technical capability, experience with NIST 800-171 assessments, and proven success in preparing SSPs and submitting accurate SPRS reports. The effort is critical to maintaining the supply chain's security posture and ensuring continued eligibility for DoD contracts requiring CUI handling.