NIST SP 800-171 Compliance Assessment

This contract involves conducting third-party assessments to evaluate contractor systems for compliance with the NIST SP 800-171 security controls, which are designed to protect Controlled Unclassified Information (CUI). The work requires delivering comprehensive compliance scores, detailed system security plans, and submitting reports to the Supplier Performance Risk System (SPRS). The assessment is critical to ensuring that contractors meet the Department of Defense’s stringent cybersecurity requirements. The opportunity is a subcontract under the Department of Defense, specifically through DEPOT OKLAHOMA, with the place of performance at Tinker Air Force Base. The contract is identified under NAICS code 541611, which relates to administrative management and general management consulting services. The solicitation was posted on May 15, 2026, with a response deadline of May 20, 2026. Although specific contact information and set-aside details are not provided, the contract is accessible through the DIBBS platform for potential bidders interested in supporting DoD cybersecurity compliance efforts.