NIST SP 800-171 Compliance Assessment and Reporting

A cybersecurity assessment is being sought to evaluate adherence to NIST SP 800-171 Rev 1 standards for safeguarding Controlled Unclassified Information, with the assessment targeting the Department of Defense’s ASC Commodities Division. The work is structured as a subcontract and requires a detailed review of systems handling CUI to determine compliance status, culminating in a system security plan summary, a quantified compliance score, associated CAGE codes, and a clear remediation timeline addressing identified gaps. The assessment must be performed at the specified place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation, linked under the NAICS code 541611 for administrative management and general management consulting services, was posted on May 10, 2026, and proposals must be submitted by May 18, 2026. All deliverables must align precisely with NIST requirements to ensure the organization meets federal information security obligations.