NIST SP 800-171 Compliance Assessment & Scoring

The contract requires a comprehensive evaluation of a contractor’s information system against the security controls outlined in NIST SP 800-171 Revision 1, focusing on assessing the implementation and effectiveness of each requirement. This includes conducting a detailed control evaluation to determine adherence, performing a gap analysis to identify deficiencies, assigning a compliance scoring based on the extent of control fulfillment, and producing thorough documentation of all findings, observations, and recommendations. The assessment must be rigorous and methodical, ensuring the contractor’s system meets federal standards for protecting controlled unclassified information. Performance is expected to be completed at Tinker Air Force Base with a zip code of 73145-8000, and the work is classified as a subcontract under NAICS code 541611. The opportunity was posted on May 13, 2026, with a response deadline of May 21, 2026, and is being managed by the ASC Commodities Division within the Department of Defense. All deliverables must align with federal cybersecurity mandates, and the successful bidder will be responsible for delivering a complete, accurate, and actionable compliance report that supports ongoing information assurance efforts for sensitive government data.