NIST SP 800-171 Compliance Assessment Services

The contract requires the provision of cybersecurity compliance assessment services for Department of Defense contractors, specifically aligned with the requirements of NIST SP 800-171 Revision 1. Services include conducting thorough gap analyses to identify areas where current security controls fall short of compliance standards, developing comprehensive System Security Plans that document how controls are implemented and maintained, and accurately reporting SPRS scores to reflect the contractor’s cybersecurity posture. The work is to be performed in support of DoD supply chain security objectives, ensuring that all assessed entities meet federal mandates for protecting controlled unclassified information. This subcontract is issued under NAICS code 541611 and is administered by C and T Supply Chain within the Department of Defense. The solicitation was posted on May 10, 2026, with a response deadline of May 21, 2026. Performance is designated to occur at FPO, ZIP 96632, indicating operations may involve overseas or mobile support for defense contractors. The contract is not subject to any stated set aside provisions and is accessible through the DIBBS platform for potential bidders seeking to support DoD cybersecurity compliance initiatives.