NIST SP 800-171 Compliance Assessment Services

The contract requires providing compliance assessment services for defense contractors’ information systems to ensure adherence to NIST SP 800-171 Rev 1 standards. This includes conducting detailed evaluations to identify gaps in security controls, assigning numerical scores based on compliance levels such as 105 out of 110, and documenting findings in formal reports for delivery to Department of Defense entities like the Defense Contract Management Agency. The work involves evaluating the implementation of cybersecurity requirements across contractor systems and providing actionable insights to support remediation efforts. Supporting corrective action planning is a central component, meaning the contractor must not only identify shortcomings but also assist defense contractors in developing and implementing effective strategies to achieve full compliance. The performance location is designated as FPO with ZIP code 96667-2610, and the contract is structured as a subcontract under the NAICS code 541611. The solicitation was posted on May 11, 2026, with responses due by May 19, 2026, and is managed by the ASC Commodities Division under the Department of Defense.