NIST SP 800-171 Compliance Assessment & Gap Analysis

The contractor is required to conduct a comprehensive cybersecurity assessment of their posture aligned with the NIST Special Publication 800-171 Revision 1 standards, focusing on identifying gaps in the implementation of required controls for protecting controlled unclassified information. The evaluation must systematically review all relevant security requirements, document deficiencies, and provide actionable remediation recommendations to bring the contractor's systems and processes into full compliance. This assessment is not a theoretical exercise but a formal, evidence-based analysis that must result in a detailed report submitted to the contracting entity. The contract is a subcontract under the Department of Defense’s ASC Commodities Division, with performance specifically tied to Hill Air Force Base, Utah, at zip code 84056-5734. All work must be completed and delivered by the response deadline of May 20, 2026, following a solicitation posted on May 12, 2026. The NAICS code 541611 indicates this is a professional, scientific, and technical services engagement, likely involving cybersecurity consulting or compliance auditing expertise. There is no set-aside designation specified, and the evaluation must be thorough enough to support the Department of Defense’s assurance that sensitive information is adequately safeguarded against emerging threats.