NIST SP 800-171 Compliance Assessment and Reporting

The contract requires the performance of a NIST SP 800-171 Rev 1 assessment to evaluate compliance with security requirements for safeguarding Controlled Unclassified Information, followed by the development of a comprehensive System Security Plan to document controls and remediation efforts. The deliverables must be submitted to the Supplier Performance Risk System to fulfill the Defense Federal Acquisition Regulation Supplement clause 252.204-7012, ensuring alignment with Department of Defense standards for protecting CUI within contractor systems. The work is structured as a subcontract under the agency name ASC SUPPLIER OPER AE AND AF DIV, with performance localized to New Cumberland, Pennsylvania, 17070-5002, and falls under NAICS code 541611 for management, scientific, and technical consulting services. Responses are due by May 13, 2026, and the solicitation was posted on May 8, 2026, indicating a tight five-day window for proposal submission.