NIST SP 800-171 Cybersecurity Compliance and Assessment

The contract requires the implementation, assessment, and documentation of cybersecurity controls aligned with NIST SP 800-171 Rev 1 to safeguard Controlled Unclassified Information (CUI) on systems operated under the Department of Defense. The contractor must deliver a comprehensive System Security Plan, a detailed Plan of Action and Milestones, and achieve a verified SPRS score of 110 out of 110, demonstrating full compliance with all required controls. These deliverables are essential for validating the system's security posture and ensuring adherence to federal cybersecurity standards for CUI handling. This subcontract is issued by the ASC Commodities Division under the Department of Defense and is performance-based at a location in Anniston, Alabama with a ZIP code of 36201-4199. The solicitation was posted on May 12, 2026, with a response deadline of May 20, 2026. The NAICS code 541611 indicates that the scope of work falls under Administrative Management and General Management Consulting Services, emphasizing the project’s focus on compliance management and cybersecurity strategy rather than technical infrastructure development alone. All activities must be documented thoroughly to meet federal audit readiness requirements.