NIST SP 800-171 Compliance Assessment and Reporting

The contract requires the execution of comprehensive cybersecurity compliance assessments for Department of Defense contractors handling Controlled Unclassified Information, specifically aligned with the requirements of NIST Special Publication 800-171. The scope includes a detailed review of system architecture, identification of compliance gaps, and generation of a formal compliance score to evaluate adherence to all 110 security controls outlined in the framework. The assessed entities must meet established benchmarks to ensure the protection of CUI, and the contractor is responsible for preparing and submitting the System Security Plan Report System score to the SPRS database on behalf of the assessment recipient. All work under this subcontract is to be performed at the designated place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation, categorized under NAICS code 541611 for Administrative Management and General Management Consulting Services, was posted on May 10, 2026, and responses are due by May 18, 2026. This opportunity is issued by the ASC Commodities Division of the Department of Defense and is accessible via the DIBBS platform. The contract is structured as a subcontract, indicating it supports a larger prime contract or program within the defense supply chain.