NIST SP 800-171 Cybersecurity Assessment and Compliance

The contract requires the execution of comprehensive cybersecurity assessments aligned with NIST SP 800-171 standards to evaluate compliance posture across all relevant controls. The scope includes identifying gaps in implemented security measures, thoroughly documenting findings, and ensuring all results are accurately submitted to the Supplier Performance Risk System. This work is critical for maintaining federal cybersecurity requirements and must be performed with precision to support government supply chain integrity. The task is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, with performance required at the location in New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on April 29, 2026, with responses due by May 7, 2026, and falls under the NAICS code 541611 for administrative management and general management consulting services. Timing and accuracy in delivering the assessment outcomes are essential to meet federal compliance obligations and avoid supplier risk penalties.