NIST SP 800-171 Compliance Assessment Services

The contract calls for comprehensive cybersecurity assessments of systems handling Controlled Unclassified Information to determine adherence to NIST SP 800-171 Rev 1 standards. The work involves evaluating security controls, identifying gaps in compliance, and producing deliverables that include detailed security scores, timelines for achieving full compliance, and concise summaries of system architecture. These assessments are critical to ensuring that systems meet federal requirements for protecting sensitive but unclassified data. Performance is expected to be conducted at the specified location in New Cumberland, Pennsylvania, with results delivered in a format suitable for government review and audit readiness. This is a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, with a North American Industry Classification System code of 541611 indicating it falls under management consulting services. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026, indicating a tight turnaround for potential contractors. The work does not include set-aside designations, meaning it is open to all qualified entities regardless of size or business type. The point of contact information is not provided in the data, and all communications must be routed through the official DIBBS portal listed for submission and inquiry.