NIST SP 800-171 Compliance and Cybersecurity Support

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information, with a focus on achieving a medium or high assessment score from the Department of Defense. This includes developing a System Security Plan and a Plan of Action and Milestones to document remediation efforts, ensure compliance, and address identified security gaps. The work is centered on establishing a robust cybersecurity posture aligned with federal standards for handling CUI within a defense contracting environment. Performance is required at New Cumberland, Pennsylvania, with a submission deadline of April 30, 2026, and the work is structured as a subcontract under the NAICS code 541611 for Management Consulting Services. The contracting entity is the ASC Supplier Operation OEM Division within the Department of Defense, indicating this effort supports critical defense supply chain security objectives. Success will be measured by full compliance with NIST controls and formal approval of the DoD assessment score, ensuring the contractor meets the necessary cybersecurity requirements for handling sensitive government information.