NIST SP 800-171 Compliance Assessment and Reporting

The contract entails conducting comprehensive cybersecurity assessments to verify adherence to NIST SP 800-171 Rev 1 standards, focusing on detailed reviews of security controls, identification of deficiencies, and the preparation of formal reports destined for submission to the SPRS system. The work requires technical expertise in evaluating federal cybersecurity requirements and delivering actionable findings that ensure compliance across information systems handling controlled unclassified information. All deliverables must be accurate, timely, and aligned with federal guidelines to support the contracting organization’s regulatory obligations. This subcontract is issued by the ASC Commodities Division under the Department of Defense, with performance required at New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. The NAICS code 541611 indicates the work falls under management, scientific, and technical consulting services, emphasizing the need for specialized cybersecurity advisory capabilities. The contract is not subject to a specific set-aside designation and is open to qualified subcontractors capable of meeting the technical and compliance demands of the assessment and reporting process.