Cybersecurity Compliance Support (NIST SP 800-171 Implementation)

This contract requires support for implementing the cybersecurity controls outlined in NIST SP 800-171 to safeguard Controlled Unclassified Information (CUI) in accordance with DFARS 252.204-7012 requirements. The work involves assessing, documenting, and aligning the supplier’s systems and processes with the 110 security controls specified in NIST SP 800-171 to ensure compliance with federal cybersecurity standards, with a focus on preparing accurate and timely Supplier Performance Risk System (SPRS) assessments that demonstrate adherence to these requirements. The effort is critical for maintaining eligibility to handle CUI within the Department of Defense supply chain. The contract is structured as a subcontract under the Department of Defense’s ASC Commodities Division, with performance expected to occur in Newport, Rhode Island, at the ZIP code 02841-1703. It falls under NAICS code 541611, indicating it is related to management, scientific, and technical consulting services focused on cybersecurity compliance. The solicitation was posted on May 10, 2026, with responses due by May 18, 2026, and is accessible through the DIBBS system. While no set-aside provisions or point of contact details are specified, the timeframe and location suggest urgency and a localized operational presence is required for successful execution and potential on-site verification.