NIST SP 800-171 Compliance Assessment and Reporting

The contract requires a comprehensive cybersecurity assessment aligned with NIST Special Publication 800-171 Revision 1 to evaluate the security posture of systems handling controlled unclassified information for the Department of Defense. The work involves identifying gaps in existing security controls, documenting the current state of compliance, and developing a detailed Plan of Action and Milestones to remediate deficiencies. All findings and remediation efforts must be formally recorded and submitted to the Supplier Performance Risk System to ensure DoD compliance. The assessment must be conducted with precision and documented thoroughly to meet federal standards for information security in defense supply chain environments. This subcontract is issued under NAICS code 541611 and is tied to the Aviation Supply Chain organization within the Department of Defense. The performance location is specified as New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The solicitation was posted on April 29, 2026, with responses due by May 7, 2026. While no specific set-aside criteria or point of contact are provided, the urgency and specificity of the deliverables imply a time-sensitive requirement for compliance validation. All work must be completed within the given timeline and meet the strict reporting standards mandated by the DoD to maintain eligibility for defense contracts.