NIST SP 800-171 Compliance Assessment and Remediation Planning

The contract involves performing a cybersecurity self-assessment aligned with the NIST SP 800-171 Revision 1 standards to evaluate compliance and identify any security gaps. The contractor is required to report the assessment results through the Supplier Performance Risk System (SPRS) and subsequently develop a detailed remediation plan to address any deficiencies discovered during the evaluation. This effort is geared toward ensuring that appropriate protective measures are in place to safeguard controlled unclassified information in accordance with Department of Defense requirements. Set as a subcontract opportunity under NAICS code 541611, this contract is issued by the ASC Commodities Division of the Department of Defense, with the place of performance located in New Cumberland, Pennsylvania. The solicitation was posted on May 13, 2026, with responses due by May 18, 2026. While some organizational and contact details remain unspecified, the contract clearly focuses on enabling DoD contractors to achieve compliance with mandated cybersecurity standards, thereby supporting supply chain cybersecurity risk management efforts.