NIST SP 800-171 Compliance Assessment Services

The contract requires services to assess contractor information systems for compliance with NIST SP 800-171 security controls designed to safeguard Controlled Unclassified Information. The work involves evaluating the implementation of required security practices, identifying gaps in compliance, and delivering detailed analyses that outline remediation strategies and quantified assessment scores. Deliverables must include comprehensive gap analyses and actionable remediation roadmaps to help contractors achieve and maintain compliance with federal cybersecurity standards for handling CUI. The contract is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV, with performance required at Tinker Air Force Base, Oklahoma, 73145-8000. It falls under NAICS code 541611, indicating it is classified as management, scientific, and technical consulting services. The solicitation was posted on July 14, 2026, with a response deadline of July 17, 2026, indicating a tight turnaround for proposals. The contract does not specify a set-aside type or point of contact, and all submissions must be made through the provided DIBBS portal link.