NIST SP 800-171 Compliance Assessment Services

The contract calls for specialized cybersecurity assessment services focused on systems that handle Controlled Unclassified Information (CUI), ensuring their compliance with the NIST SP 800-171 Rev 1 standards. The work involves evaluating system security postures, generating detailed security scores, proposing compliance timelines, and providing comprehensive summaries of system architectures. The contract is a subcontract opportunity issued by the Department of Defense's ASC Supplier Operations OEM Division, with performance taking place in New Cumberland, Pennsylvania. Interested parties must respond by May 20, 2026, following the initial posting date of May 12, 2026. The solicitation pertains to NAICS code 541611, which covers administrative management and general management consulting services. This opportunity does not specify a set-aside type, and detailed contact information or organization type is not provided. The focus is on ensuring that systems managing sensitive but unclassified information meet rigorous federal cybersecurity standards.