NIST SP 800-171 Cybersecurity Compliance & Assessment

The contract requires the performance of comprehensive cybersecurity assessments, development of System Security Plans, and validation of compliance with NIST SP 800-171 Rev 1 for systems operated by Department of Defense contractors. This work is critical to ensuring that sensitive Controlled Unclassified Information is adequately protected in accordance with federal cybersecurity standards. The assessment and documentation activities must align precisely with the requirements outlined in NIST SP 800-171 Rev 1, covering all relevant security controls and implementation guidelines applicable to non-federal systems handling DoD data. The contract is classified as a subcontract under the NAICS code 541611, indicating it falls within the scope of management consulting services related to administrative and general management. It is issued by the ASC Commodities Division of the Department of Defense, with performance specifically tied to Patuxent River, Maryland, ZIP 20670-1545. The solicitation was posted on May 10, 2026, andResponses are due by May 18, 2026, requiring contractors to submit proposals addressing technical capability, compliance methodology, and experience with NIST 800-171 assessments prior to the deadline.