NIST SP 800-171 Cybersecurity Assessment and Compliance

The contract requires a thorough cybersecurity assessment of contractor information systems to validate compliance with NIST Special Publication 800-171 Revision 1, focusing on the implementation and effectiveness of all 14 control families designed to protect controlled unclassified information. The evaluation must examine technical, operational, and managerial safeguards to ensure alignment with federal cybersecurity standards, with the ultimate goal of preparing the contractor for official government validation. This task demands detailed documentation, system testing, and evidence collection to demonstrate adherence to the framework across all relevant areas of the information environment. The work is to be performed at Tinker Air Force Base with a zip code of 73145-8000 under a subcontract arrangement tied to the Department of Defense’s Commodity Division. The solicitation was posted on May 11, 2026, and responses are due by May 19, 2026, under the NAICS code 541690 for other scientific and technical consulting services. While no specific point of contact or set-aside details are provided, the urgency and specificity of the compliance requirement indicate a high-stakes effort to meet DoD cybersecurity mandates ahead of an authoritative review.