NIST SP 800-171 Compliance Assessment and Cybersecurity Implementation

The contract involves performing a comprehensive assessment and implementation of cybersecurity controls based on the NIST SP 800-171 standard to protect Controlled Unclassified Information (CUI). It requires developing detailed documentation including a System Security Plan (SSP) and a Plan of Action and Milestones (POA&M) while ensuring compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012. The contractor will assess current security measures, implement necessary updates to meet federal requirements, and submit results to the Supplier Performance Risk System (SPRS). Issued by the Department of Defense under the ASC Supplier Operations AE and AF Division, this subcontract focuses on cybersecurity for government contractors handling sensitive data. The solicitation was posted on May 15, 2026, with responses due by May 22, 2026. The contract falls under the NAICS code 541611, which covers administrative management and general management consulting services. Specific location details and points of contact were not provided. The work ensures that entities meet mandated cybersecurity standards to safeguard defense-related information systems.