NIST SP 800-171 Compliance Assessment & Reporting

This contract involves performing cybersecurity assessments aligned with the NIST SP 800-171 Revision 1 standards to ensure that systems meet required security controls. Key tasks include documenting system security plans, assigning Commercial and Government Entity (CAGE) codes, calculating compliance scores, and submitting the results to the Supplier Performance Risk System (SPRS). Additionally, the contractor will develop Plans of Action and Milestones (POA&Ms) for any identified deficiencies to assist the organization in achieving full compliance with the cybersecurity requirements. The work is a subcontract opportunity issued by the Department of Defense under the Construction & Equipment T & IFO EQ agency, with performance based in New Cumberland, zip code 17070-5002. The solicitation was posted on May 8, 2026, with a response deadline of May 13, 2026. The contract falls under NAICS code 541611, which pertains to administrative management and general management consulting services. This effort is critical for maintaining cybersecurity standards and ensuring that defense-related systems are compliant with federal requirements.