NIST SP 800-171 Compliance Assessment and Gap Analysis

The contract involves performing a detailed gap assessment based on NIST SP 800-171 security controls to evaluate the organization's current compliance level. This assessment requires scoring the compliance against the standardized controls, with an example score provided as 95 out of 110, indicating partial compliance. Following the assessment, the contractor must develop a comprehensive remediation roadmap outlining the necessary steps to achieve full compliance with NIST SP 800-171 requirements. Issued by the Department of Defense's DDSP New Cumberland Facility, this subcontract opportunity is identified under NAICS code 541611, related to administrative and management consulting services. The work location is specified as New Cumberland, Pennsylvania, with a response deadline set for May 28, 2026. The solicitation does not indicate any set-aside requirements and is focused on supporting the agency's compliance and cybersecurity objectives.