NIST SP 800-171 Cybersecurity Assessment & Compliance

This contract requires performing comprehensive cybersecurity services focused on compliance with NIST SP 800-171 standards to support Department of Defense requirements. The work includes conducting security assessments, implementing necessary cybersecurity controls as outlined in NIST SP 800-171, developing detailed System Security Plans (SSPs), and ensuring compliance scores are accurately reported to the Supplier Performance Risk System (SPRS) in accordance with DFARS clauses 252.204-7012 and 252.204-7020. The contract is classified as a subcontract and falls under the NAICS code 541611, which typically involves administrative management and general management consulting services. The contract is posted by the ASC Supplier Operations OEM Division of the Department of Defense, with performance expected in New Cumberland, Pennsylvania, ZIP code 17070-5002. Proposals must be submitted by May 20, 2026, following the posting on May 12, 2026. This opportunity emphasizes strict adherence to DoD cybersecurity requirements for contractor systems and ensures ongoing reporting and validation to maintain security posture and regulatory compliance within the defense supply chain.