NIST SP 800-171 Compliance Assessment & Scoring

The contract requires a thorough evaluation of contractor information systems to determine adherence to the NIST SP 800-171 Rev 1 security controls, which are designed to protect controlled unclassified information within nonfederal systems. The assessment must result in a detailed scored report, such as 95 out of 110 controls met, accompanied by a comprehensive gap analysis that identifies specific areas where security requirements are not fully satisfied and provides actionable recommendations for remediation. The work is subcontracted under the Department of Defense’s Subsistence FSE Supply Chain, with a primary place of performance listed as FPO, ZIP 96691, and must be completed under the NAICS code 541611 for management consulting services. All deliverables must be submitted by the response deadline of May 7, 2026, with the solicitation posted on May 3, 2026. The assessment must be conducted with precision and documented thoroughly to ensure the scoring reflects an accurate and unbiased evaluation of compliance. While the contract does not specify set-aside status or a point of contact, interested parties are directed to the DIBBS portal for additional details and to submit responses. The outcome of this assessment is critical for the DoD to validate the cybersecurity posture of its subcontractors and maintain the integrity of its supply chain.