NIST SP 800-171 Cybersecurity Compliance Assessment & Implementation

The contract requires the assessment and full implementation of NIST SP 800-171 Rev. 1 cybersecurity controls for a Department of Defense subcontractor, with a focus on achieving compliance through a structured process that includes conducting a comprehensive self-assessment, developing a detailed System Security Plan, and creating a Plan of Action and Milestones to address identified gaps. All deliverables must be finalized and submitted to the Supplier Performance Risk System to satisfy federal cybersecurity requirements. The work is scoped to ensure robust protection of controlled unclassified information and adherence to standardized federal security frameworks. The opportunity is classified as a subcontract under NAICS code 541612, with a response deadline of May 7, 2026, and an posted date of April 29, 2026. Performance is tied to the Aviation Supply Chain ESOC Buys organization within the Department of Defense, though no specific location for performance or point of contact is provided. Interested parties must ensure timely submission and full alignment with NIST guidelines to qualify, as compliance is mandatory for contract award and ongoing operational eligibility.