NIST SP 800-171 Cybersecurity Compliance and Assessment

The contract requires comprehensive cybersecurity compliance activities centered on NIST SP 800-171 standards to fulfill Department of Defense DFARS requirements. The scope includes conducting a detailed assessment of the current cybersecurity posture, developing a fully documented System Security Plan that aligns with NIST controls, and ensuring ongoing maintenance and updates to the plan as necessary. All findings, remediation efforts, and compliance evidence must be formally submitted to the DoD Supplier Performance Risk System to validate adherence to federal cybersecurity norms for handling controlled unclassified information. The work must be performed in support of the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV, with performance centered in New Cumberland, Pennsylvania, at zip code 17070-5002. This is a subcontract opportunity listed under NAICS code 541611, which pertains to management, scientific, and technical consulting services. The solicitation was posted on May 13, 2026, with responses due by May 21, 2026, creating a narrow window for submission. Contractors must be prepared to demonstrate full understanding and implementation of NIST 800-171 controls, possess the capability to interface with the DoD SPRS system, and maintain accurate, audit-ready documentation throughout the contract lifecycle.