NIST SP 800-171 Compliance Assessment Services

The contract requires the performance of NIST SP 800-171 self-assessments for Department of Defense information systems to evaluate compliance with cybersecurity requirements for protecting controlled unclassified information. The work involves systematically reviewing existing security controls, identifying gaps or deficiencies in implementation, and documenting findings to ensure alignment with federal standards. Results of these assessments must be accurately submitted to the Supplier Performance Risk System to fulfill DoD compliance obligations and support ongoing security posture monitoring. The contract is a subcontract under the NAICS code 541611, indicating it falls under management consulting services, and is tied to the agency name ASC SUPPLIER OPER OEM DIVISION within the Department of Defense. Performance is expected to occur at a specified location in New Cumberland with a ZIP code of 17070-5002. Proposals must be submitted by May 20, 2026, with the solicitation posted on May 12, 2026, through the DIBBS platform. There is no set-aside classification specified, and all response materials must meet the technical and procedural expectations outlined in the solicitation for NIST SP 800-171 compliance validation.