NIST SP 800-171 Cybersecurity Compliance and Assessment

This contract involves conducting a comprehensive assessment to ensure compliance with the NIST SP 800-171 cybersecurity standards, specifically targeting the requirements outlined by the Department of Defense's Defense Federal Acquisition Regulation Supplement (DFARS). The scope includes performing a detailed evaluation of existing cybersecurity practices, developing and maintaining a System Security Plan (SSP) that documents compliance efforts, and submitting the assessment results to the DoD's Supplier Performance Risk System (SPRS). The primary objective is to align with stringent cybersecurity protocols to protect controlled unclassified information within the DoD supply chain. The contract is a subcontract opportunity posted on May 13, 2026, with a response deadline set for May 21, 2026. It falls under the NAICS code 541611, which pertains to administrative management and general management consulting services. The work will be performed in New Cumberland, Pennsylvania, under the oversight of the Department of Defense’s ASC Supplier Operations AE and AF Division. This opportunity is critical for vendors specializing in cybersecurity compliance assessments and government contracts seeking to support DoD contractors in meeting mandatory cybersecurity safeguards.