NIST SP 800-171 Cybersecurity Compliance Assessment & POA&M Development

This contract involves performing a comprehensive assessment of an organization’s compliance with the NIST SP 800-171 cybersecurity standards. The contractor is tasked with identifying any deficiencies in current cybersecurity practices and developing a detailed Plan of Action and Milestones (POA&M) to address these gaps. The POA&M will support submission to the Supplier Performance Risk System (SPRS), ensuring the organization's adherence to required cybersecurity protocols. Issued by the Department of Defense's Land Supply Chain office, the contract is classified under NAICS code 541611, which pertains to administrative management and general management consulting services. The performance location is APO with ZIP code 96694, reflecting a likely military or government site overseas. Responses to the subcontract opportunity must be submitted by May 28, 2026, shortly after the posting date of May 22, 2026. This project is essential for maintaining cybersecurity compliance within the defense supply chain framework.