NIST SP 800-171 Compliance Assessment and Gap Analysis

The contract requires a comprehensive cybersecurity assessment of defense systems to determine adherence to NIST SP 800-171 Rev 1 standards, focusing on identifying gaps in security controls and providing actionable recommendations to achieve full compliance. The work is scoped to support the contractor in attaining a complete compliance score within the Supplier Performance Risk System, ensuring that all required safeguards for controlled unclassified information are properly implemented and documented. The assessment must be conducted with precision to align with federal cybersecurity mandates and must be delivered in a format that enables timely reporting and remediation planning. This subcontract is issued under the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION and is tied to a performance location at Ellsworth Air Force Base, SD, with a zip code of 57706-4835. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026, indicating a short turnaround window for technical evaluations and proposal submissions. The North American Industry Classification System code 541612 categorizes the work under computer systems design and related services, underscoring the technical nature of the task. The effort is critical to maintaining the integrity and compliance posture of defense infrastructure and must be executed by a qualified entity with demonstrated expertise in NIST frameworks and SPRS scoring methodologies.