NIST SP 800-171 Compliance Assessment & Reporting

The contract requires the performance of cybersecurity assessments aligned with NIST Special Publication 800-171 Revision 1 to evaluate the security posture of information systems handling controlled unclassified information. Tasks include developing comprehensive system security plans, assigning CAGE codes to relevant entities, calculating compliance scores based on assessed controls, and submitting detailed reports to the Supplier Performance Risk System. Any identified gaps or deficiencies must be documented and addressed through the creation of Plan of Action and Milestones documents to guide remediation efforts and achieve full compliance with NIST requirements. The work is to be performed at the specified location in New Cumberland, PA, with results directly tied to DoD procurement and security standards. This is a subcontract under the Department of Defense, classified under NAICS code 541611 for other scientific and technical consulting services. The solicitation was posted on May 8, 2026, with responses due by May 13, 2026, indicating a tight turnaround window for qualified vendors to submit proposals. The contract is not subject to a specific set-aside designation, and performance is expected to meet strict federal cybersecurity compliance benchmarks. All deliverables must be accurately documented and reported through official DoD channels to ensure audit readiness and continued eligibility for federal contracting.