NIST SP 800-171 Compliance Assessment Services

The contract seeks cybersecurity assessment services to evaluate systems handling Controlled Unclassified Information (CUI) for compliance with NIST SP 800-171 Rev 1, requiring a detailed gap analysis and a scoring system to quantify compliance levels. The work involves identifying deficiencies in security controls, recommending remediation steps, and providing a structured assessment report that aligns with federal requirements for protecting CUI. This subcontract is issued under NAICS code 541611 for Management, Scientific, and Technical Consulting Services and is managed by the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense. The place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. The contract is not subject to a specific set-aside classification, and while no point of contact is listed, interested parties can access further information through the provided DIBBS portal link. The nature of the work implies a requirement for qualified cybersecurity professionals with expertise in NIST frameworks and experience conducting assessments in defense or federal contractor environments.