Cybersecurity Posture Assessment (NIST SP 800-171 Compliance)

The contract requires a comprehensive cybersecurity assessment of systems handling Controlled Unclassified Information to determine compliance with the National Institute of Standards and Technology Special Publication 800-171 requirements. This assessment must evaluate the implementation of security controls, identify gaps in current practices, and produce a detailed report that includes System for Award Management (SPRS) reporting to document the organization’s security posture. The evaluation will focus on systems deployed at the designated place of performance in New Cumberland, Pennsylvania, and must align with Department of Defense standards for safeguarding CUI. In addition to identifying noncompliances, the contractor must develop a structured remediation plan that outlines actionable steps, timelines, and responsible parties to address identified deficiencies. The work is being conducted as a subcontract under the Department of Defense’s ASC Supplier Operations OEM Division, with a North American Industry Classification System code of 541611 for other scientific and technical consulting services. Interested parties must submit responses by May 13, 2026, and the offering is not subject to any specific set-aside classifications. The assessment will be critical to ensuring the contractor maintains authorized access to federal systems and supports ongoing mission readiness by meeting federal cybersecurity mandates. Success in this engagement will require proven experience with NIST SP 800-171 frameworks, SPRS data submission protocols, and the ability to deliver findings with technical precision and clear remediation pathways.