Cybersecurity Compliance Support – NIST SP 800-171 Assessment

The contract requires comprehensive cybersecurity compliance support to perform a NIST SP 800-171 Rev 1 assessment on the prime contractor’s information systems, with a focus on evaluating existing security controls and documenting compliance requirements. The scope includes identifying gaps in control implementation, executing system hardening measures to meet CUI protection standards, and developing a detailed plan for safeguarding controlled unclassified information throughout the system environment. All findings and corrective actions must be formally documented and submitted to the Supplier Performance Risk System to ensure regulatory alignment and federal contracting eligibility. The work is to be performed at the specified place of performance in New Cumberland, PA, 17070-5002, under a subcontract structure for the Department of Defense’s ASC Commodities Division. The solicitation was posted on July 16, 2026, with responses due by July 21, 2026, indicating a tight turnaround for qualified vendors. The North American Industry Classification System code 541611 designates this as an information technology consulting service, requiring expertise in federal cybersecurity frameworks and experience with DOD compliance protocols. Deliverables are centered on achieving and verifying NIST 800-171 compliance through technical evaluation, remediation, and official reporting to DIBBS.