NIST SP 800-171 Cybersecurity Assessment and Compliance Reporting

The contract requires conducting cybersecurity assessments of Department of Defense contractor systems in accordance with NIST SP 800-171 Rev. 1, focusing on identifying control deficiencies, generating compliance scores, and submitting findings to the Supplier Performance Risk System. The work involves a thorough evaluation of system security controls to ensure alignment with federal cybersecurity standards, with detailed documentation of gaps and areas needing remediation. Deliverables include comprehensive compliance reports and actionable roadmaps designed to guide contractors toward full NIST 800-171 adherence, alongside the development of a summary system security plan architecture that outlines the structure and implementation of protective measures. Performance of these tasks is centered at New Cumberland, Pennsylvania, with a response deadline of May 14, 2026, and the solicitation was posted on May 6, 2026. This subcontract falls under NAICS code 541611 for management, scientific, and technical consulting services and is administered by the ASC Commodities Division within the Department of Defense. The scope demands expertise in cybersecurity frameworks, data analysis, and compliance reporting, with an emphasis on accuracy, timeliness, and alignment with DoD expectations for protecting controlled unclassified information across the supply chain.