NIST SP 800-171 Compliance Assessment Execution

This contract entails performing formal cybersecurity assessments on information systems to ensure compliance with the NIST SP 800-171 security standards. The primary objective is to evaluate existing controls, identify any gaps, and generate summary scores necessary for submission to the Supplier Performance Risk System (SPRS). The work is classified under NAICS code 541611, which pertains to administrative management and general management consulting services. Issued by the ASC Commodities Division of the Department of Defense, the subcontract requires the assessments to be conducted at the Cherry Point location, bearing the zip code 28533-5040. The contract was posted on May 28, 2026, with a response deadline of June 2, 2026. No specific small business set-aside applies, and while some organizational or contact details remain unspecified, the essential focus is on ensuring information systems meet required cybersecurity regulations for defense contracting.