Cybersecurity Compliance Support (NIST SP 800-171 / CMMC)

The contract supports the implementation, assessment, and documentation of NIST SP 800-171 cybersecurity controls to ensure compliance with federal standards for protecting controlled unclassified information. It includes the development of a comprehensive Systems Security Plan required for submission to the Supplier Performance Risk System, ensuring the contractor meets regulatory requirements for handling sensitive government data. The work is scoped to align with both NIST SP 800-171 and the Cybersecurity Maturity Model Certification framework, addressing technical, operational, and procedural safeguards. This is a subcontract under the U.S. Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, with performance required at Robins Air Force Base, Georgia, ZIP 31098-1887. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. The North American Industry Classification System code 541611 identifies the work as occurring within computer systems design services, indicating the need for specialized cybersecurity expertise. The nature of the contract suggests the contractor must demonstrate proven ability in NIST compliance, documentation rigor, and experience supporting defense subcontractors through audit-ready security programs.