NIST SP 800-171 Cybersecurity Assessment and Compliance

The contract requires comprehensive cybersecurity services aligned with NIST SP 800-171 Rev 1 to ensure Department of Defense compliance, including conducting thorough assessments of information systems, developing detailed System Security Plans that document controls and implementation strategies, and creating actionable Plans of Action and Milestones to address identified gaps and deficiencies. These deliverables must be accurately prepared for submission to the Supplier Performance Risk System to demonstrate adherence to federal cybersecurity standards essential for handling controlled unclassified information within the defense supply chain. Work is to be performed at the specified location in Norfolk, Virginia, with a response deadline of May 19, 2026, under a subcontract structure governed by NAICS code 541611 for management consulting services. The effort is critical to supporting aviation supply chain security objectives under the Department of Defense, requiring expertise in federal cybersecurity frameworks, document precision, and timely compliance reporting to meet contractual obligations and safeguard sensitive defense data.