NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a cybersecurity assessment of contractor systems that handle Controlled Unclassified Information (CUI), aligned with the standards outlined in NIST SP 800-171 Rev 1. The scope includes a thorough gap analysis to identify deficiencies in current security controls, the development of a detailed remediation plan to address these gaps, and the submission of a Security Performance Reporting System (SPRS) report to document compliance status. All activities must be executed to ensure the systems meet federal cybersecurity requirements for protecting CUI. The work is classified as a subcontract under NAICS code 541611, with performance located in New Cumberland, Pennsylvania, and the responsible agency is the Department of Defense under the ASC SUPPLIER OPER OEM DIVISION. Interested parties must submit responses by the deadline of May 20, 2026, following the solicitation issued on May 12, 2026.