NIST SP 800-171 Compliance Assessment & Documentation

The contract requires the performance of a comprehensive NIST SP 800-171 assessment of the prime contractor’s information systems to ensure alignment with federal security standards for handling Controlled Unclassified Information. The scope includes evaluating system configurations, access controls, audit capabilities, and data protection measures against the 110 security requirements outlined in NIST SP 800-171, with the goal of identifying gaps and recommending corrective actions. The contractor must prepare all necessary documentation to formally demonstrate compliance, including System Security Plans, Plan of Action and Milestones, and supporting evidence for each control implementation, ensuring the prime contractor can meet Department of Defense mandates for CUI handling. This subcontract is designated under NAICS code 541512 and is tied to operations at HURLBURT FIELD with a zip code of 32544-5800. The solicitation was posted on June 25, 2026, with a strict response deadline of June 30, 2026. The award will be made by the Department of Defense through its LAND SUPPLY CHAIN organization, and all deliverables must be submitted in accordance with federal cybersecurity compliance protocols. The successful bidder will work directly with the prime contractor to validate and document the security posture of systems that process, store, or transmit CUI, ensuring readiness for audits or inspections by government oversight entities.