NIST SP 800-171 Compliance Assessment and Scoring

The contract involves performing comprehensive assessments of an organization's cybersecurity posture specifically against the NIST SP 800-171 standards. The service provider will evaluate compliance, generate summary scores reflecting the current security status, identify any gaps or deficiencies, and offer detailed recommendations for remediation to improve cybersecurity measures. This effort supports the Department of Defense through its Construction & Equipment MRO Services I agency, with the work to be conducted in San Diego under NAICS code 541611, which typically relates to administrative management and general consulting services. Responses to the solicitation are due by May 28, 2026, with the contract posting date on May 22, 2026. This subcontract does not specify any set-aside classification. The goal is to strengthen the cybersecurity safeguards in line with federal requirements, ensuring that controlled unclassified information remains protected according to DoD policies. The contract is critical for maintaining compliance with established cybersecurity frameworks within the defense contracting environment.