NIST SP 800-171 Compliance Assessment

The contract requires assessment and reporting on the implementation of NIST SP 800-171 cybersecurity controls within a defense-related environment, focusing on evaluating how well an organization has adopted the required security practices to protect controlled unclassified information. The deliverables include the development of a System Security Plan that documents the security controls in place, a Plan of Action and Milestones that identifies gaps and outlines remediation steps, and a compliance scoring report that quantifies adherence to the NIST standards. The work is being performed under a subcontract arrangement for the Department of Defense, specifically for the ASC SUPPLIER OPER AE AND AF DIV, with performance mandated at a location in New Cumberland, Pennsylvania, ZIP code 17070-5002. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026, under NAICS code 541611 which classifies the contract under Management, Scientific, and Technical Consulting Services. All submissions must demonstrate technical competency in conducting NIST 800-171 assessments and producing accurate, actionable documentation suitable for federal cybersecurity compliance purposes.