NIST SP 800-171 Compliance Assessment & Gap Analysis

The contract requires a comprehensive cybersecurity compliance assessment aligned with NIST Special Publication 800-171 Revision 1, focusing on identifying gaps in existing controls within the target system. The scope includes a detailed review of the system security plan, scoring of compliance status against all 110 security requirements, and the development of a realistic timeline projecting when full compliance can be achieved. The deliverables must clearly outline deficiencies, prioritize remediation efforts, and provide actionable recommendations to close gaps in accordance with federal standards for protecting controlled unclassified information. The work is scoped as a subcontract under the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION, with performance to be conducted at a location in Phoenix, Arizona, 85043. The North American Industry Classification System code is 541611, indicating the nature of the work as managerial and technical consulting services. The solicitation was posted on May 12, 2026, with responses due by May 20, 2026, and the full details can be accessed through the DIBBS platform. The assessment must be thorough, methodical, and deliverable in a format suitable for government review and audit readiness.