NIST SP 800-171 Compliance Assessment and Gap Analysis

The contract requires a thorough evaluation of information systems to determine alignment with the security controls outlined in NIST Special Publication 800-171, focusing on the protection of controlled unclassified information. The assessment must identify deficiencies, misconfigurations, and missing safeguards relative to the required controls, culminating in a detailed gap analysis report that clearly documents each shortfall and recommends actionable remediation steps. The work is being performed under a subcontract for the Department of Defense through the Maritime Supply Chain organization, with performance centered in New Cumberland, Pennsylvania, under NAICS code 541512 for computer systems design services. Responses are due by July 21, 2026, following a posting date of July 16, 2026, and the solicitation is accessible via the DIBBS portal at the provided link.