NIST SP 800-171 Compliance Assessment and Reporting

The contract requires the performance of a comprehensive assessment, documentation, and reporting process to evaluate compliance with NIST SP 800-171 Rev 1 requirements for a System Security Plan. This includes verifying that all required security controls are properly implemented, operational, and maintainable in an auditable fashion, with active coordination with government representatives for Medium or High risk assessments. The work involves detailed analysis of existing security practices against NIST standards, identifying gaps, and providing clear documentation to demonstrate adherence and remediation plans where necessary. All deliverables must support government validation and audit readiness, ensuring transparency and accountability throughout the compliance lifecycle. The contract is issued as a subcontract under the Department of Defense through the ASC SUPPLIER OPER OEM DIVISION, with a place of performance in FPO, ZIP 09587. It falls under NAICS code 541611, indicating professional, scientific, and technical services related to administrative management and general management consulting. The solicitation was posted on April 29, 2026, with a response deadline of May 7, 2026, and is accessible via the DIBBS platform. While no set-aside type is specified, the work is expected to be performed by a qualified subcontractor supporting defense-related systems requiring strict adherence to federal cybersecurity standards.