NIST SP 800-171 Compliance Assessment & Scoring

The contractor is required to perform a Medium or High assessment of their information system in accordance with NIST SP 800-171, delivering a formal scored result that reflects compliance posture across all required security controls. The assessment must identify specific gaps and deficiencies relative to the NIST guidelines, providing actionable insights to support the development of a remediation plan aimed at achieving full compliance. The deliverables include a detailed evaluation report with scoring, documented findings, and strategic recommendations for addressing identified weaknesses. This subcontract is issued by the ACTIVE DEVICES DIVISION under the Department of Defense, with performance designated to occur at FORT BENNING, Georgia, 31905. The solicitation is classified under NAICS code 541611, indicating it relates to management, scientific, and technical consulting services. Bidders must submit responses by May 13, 2026, following the posting date of May 8, 2026, and are expected to demonstrate expertise in federal cybersecurity frameworks, particularly NIST SP 800-171 implementation and scoring methodologies.