NIST SP 800-171 Compliance Assessment & Scoring

The contract requires a comprehensive self-assessment of an information system against all 110 security requirements outlined in NIST Special Publication 800-171, focusing on the protection of controlled unclassified information. The assessment must evaluate the current state of the system’s security controls, generate a quantifiable compliance score based on the degree to which each requirement is met, and clearly identify specific gaps or deficiencies in implementation. The deliverable includes a detailed remediation plan that outlines actionable steps, timelines, and responsible parties to address each identified gap and achieve full compliance. The work must be performed by a qualified party under a subcontract arrangement with the Department of Defense through LSO Combat Vehicles and Armament, with performance centered at the Anniston, Alabama location with postal code 36201-4199. The solicitation is open for responses only until July 24, 2026, and is classified under NAICS code 541611, indicating it relates to management, scientific, and technical consulting services. The assessment must be thorough, methodical, and documented to support audit readiness and ensure alignment with federal cybersecurity standards for defense-related information systems.