NIST SP 800-171 Compliance Assessment and Reporting

The contract requires the execution of cybersecurity assessments on contractor information systems to determine adherence to NIST SP 800-171 Rev 1 standards, focusing on the evaluation of security controls, system architecture documentation, and the generation of detailed scoring results. These assessments are critical for ensuring that contractor systems handling controlled unclassified information meet the Department of Defense’s cybersecurity requirements, with all findings to be formally submitted to the Supplier Performance Risk System. The work must be completed within a short window, with a response deadline just five days after the solicitation was posted, indicating an urgent need for qualified service providers. Performance is tied to Robins Air Force Base, Georgia, and the contract is classified as a subcontract under NAICS code 541611 for management, scientific, and technical consulting services.