NIST SP 800-171 Compliance Assessment and Reporting

This contract involves performing a comprehensive assessment of information systems to ensure compliance with NIST SP 800-171 standards. The scope includes developing a detailed System Security Plan (SSP), documenting the system architecture, assigning Commercial and Government Entity (CAGE) codes, and submitting all findings and documentation to the Department of Defense Secure Repository Service (DoD SPRS). This subcontract is issued by the ASC Supplier Oper OEM Division of the Department of Defense, with the work to be performed in Jacksonville, Florida, under NAICS code 541611, which pertains to administrative management and general management consulting services. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026, indicating a relatively short response period. There is no specified set-aside or preference type for this subcontract. The contract's primary objective is to support DoD compliance requirements by ensuring that contractors' information systems meet stringent cybersecurity standards specified in NIST SP 800-171, which is critical for handling Controlled Unclassified Information (CUI). The overall effort is crucial for maintaining the security posture and regulatory compliance within defense-related information systems.