NIST SP 800-171 Compliance Assessment (Cybersecurity)

The contract requires the completion of a NIST SP 800-171 compliance assessment to ensure adherence to DFARS 252.240-7997 cybersecurity standards for the handling of Controlled Unclassified Information. The assessment must result in a detailed score report that validates the organization’s implementation of required security controls, demonstrating readiness to protect sensitive data within the Department of Defense supply chain. This work is classified as a subcontract under NAICS code 541611, indicating it involves information technology consulting services focused on cybersecurity compliance. The task is tied to a specific place of performance in New Cumberland, Pennsylvania, with a response deadline of August 13, 2026, and a posting date of August 5, 2026. The contracting entity is the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense, and the solicitation can be accessed through the DIBBS platform. Although no set-aside classification or point of contact is provided, the effort is critical for maintaining regulatory compliance and supporting defense contractor obligations to safeguard Controlled Unclassified Information.