NIST SP 800-171 Compliance Assessment & Cybersecurity Implementation

The contract requires comprehensive assessment and remediation of contractor information systems to achieve full compliance with NIST Special Publication 800-171, specifically targeting the protection of Controlled Unclassified Information. The objective is to attain a perfect score of 110 out of 110 by addressing all required security controls and implementing necessary cybersecurity measures across all relevant systems. This includes identifying gaps in existing safeguards, executing targeted corrections, and verifying that all technical, administrative, and physical controls are fully operational and documented to meet federal standards. The work must be performed at the specified place of performance in New Cumberland, Pennsylvania, with all findings and outcomes submitted to the Department of Defense’s Supplier Performance Risk System for official recording and evaluation. This is a subcontract under the Department of Defense with a NAICS code of 541512, indicating information technology services, and was posted on May 12, 2026, with a strict response deadline of May 20, 2026. All activities must align precisely with the NIST SP 800-171 framework to ensure the confidentiality, integrity, and availability of CUI. Compliance is not optional; achieving the target score and timely submission to SPRS are mandatory deliverables. The contract demands a high level of technical expertise in cybersecurity assessment and remediation, with an emphasis on precision, documentation, and adherence to DoD requirements. Failure to meet the 110/110 benchmark or deliver required results by the deadline will result in non-compliance and potential disqualification.