NIST SP 800-171 Compliance Assessment and SPRS Submission

This contract requires the execution of a comprehensive cybersecurity assessment to verify adherence to the National Institute of Standards and Technology Special Publication 800-171 Revision 1 standards, focusing on the protection of controlled unclassified information within nonfederal systems. The contractor must conduct a thorough evaluation of existing security controls, identify gaps, and implement necessary remediations to achieve full compliance. A formal System Security Plan must be developed and maintained throughout the assessment process, documenting policies, procedures, and control implementations aligned with NIST SP 800-171 Rev 1 requirements. All findings, remediation actions, and final compliance status must be compiled and submitted to the Supplier Performance Risk System for official record and evaluation. The work is governed as a subcontract under the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION, with performance required at the facility located in New Cumberland, Pennsylvania, ZIP 17070-5002. The solicitation was posted on May 12, 2026, with responses due by May 20, 2026, and falls under NAICS code 541611 for management, scientific, and technical consulting services. The contractor must ensure all deliverables meet federal cybersecurity compliance standards and are submitted in a timely manner to satisfy contractual obligations and maintain eligibility for future DoD work.