NIST SP 800-171 Compliance Assessment Execution

The contract requires the execution of NIST SP 800-171 compliance assessments for subcontractor information systems, focusing on evaluating security controls, identifying gaps, assigning scores, and documenting detailed system security plans. The assessments must be performed thoroughly to ensure alignment with federal cybersecurity requirements and result in comprehensive reporting that captures the current state of security Posture. All findings must be formally submitted to the Supplier Performance Risk System to maintain visibility and accountability across the Department of Defense supply chain. This engagement is classified as a subcontract under the Defense Logistics Agency, operating within the broader Department of Defense framework, and is tied to the NAICS code 541611 for management consulting services. Although specific geographic performance locations and point of contact details are not provided, the work is critical to maintaining compliance standards across defense subcontractors. The solicitation was posted in 2026, indicating a forward-looking procurement initiative aimed at strengthening cybersecurity readiness within the defense industrial base.