NIST SP 800-171 Compliance Assessment & Reporting

The contract requires comprehensive cybersecurity assessments to ensure full compliance with NIST SP 800-171 standards, focusing on identifying gaps in security controls and implementing necessary remediation measures. Key deliverables include the development and maintenance of System Security Plans and Plans of Action and Milestones, which document existing security postures, identified vulnerabilities, and actionable steps to address deficiencies. All findings and progress must be reported through the Supplier Performance Risk System, ensuring transparency and alignment with Department of Defense requirements. The work is subcontracted under the agency name ASC SUPPLIER OPER OEM DIVISION with performance centered at Tinker Air Force Base, Oklahoma, 73145-8000. The solicitation was posted on May 12, 2026, with responses due by May 20, 2026, and falls under NAICS code 541611 for management, scientific, and technical consulting services. The contract is not subject to any specific set-aside designation, and bidders must be prepared to meet stringent federal cybersecurity compliance deadlines without deviation. The work demands expertise in NIST frameworks, experience with SPRS reporting, and the ability to deliver fully documented, audit-ready security plans under tight timelines, particularly given the location’s association with critical defense infrastructure at Tinker AFB.