NIST SP 800-171 Compliance Assessment and Reporting

The contract calls for conducting comprehensive cybersecurity compliance assessments aligned with NIST SP 800-171 standards for Department of Defense contractors managing Controlled Unclassified Information (CUI). Key responsibilities include reviewing system architectures, evaluating compliance levels through scoring, and submitting the results to the Supplier Performance Risk System (SPRS). This subcontract is aimed at ensuring that contractors meet stringent cybersecurity requirements when handling sensitive information in accordance with DoD mandates. Issued by the ASC Commodities Division within the Department of Defense, the work will be performed in New Cumberland, zip code 17070-5002. The solicitation was posted on May 10, 2026, with a response deadline of May 18, 2026. It falls under the NAICS code 541611, which typically covers administrative management and general consulting services. The contract targets specialized support for DoD efforts to maintain cybersecurity compliance and risk management through detailed assessment and reporting protocols.