NIST SP 800-171 Cybersecurity Compliance Assessment and Remediation

This contract requires the execution of a Medium or High NIST SP 800-171 cybersecurity assessment for a Department of Defense entity, focusing on identifying gaps in current security controls and achieving full compliance with all 110 required implementation requirements. The successful contractor must develop a comprehensive System Security Plan that documents policies, procedures, and controls aligned with NIST standards, ensuring all findings are accurately recorded and remediation steps are clearly outlined. The final deliverable includes submitting the assessment results and compliance status to the Supplier Performance Risk System, with the explicit goal of securing a 110 out of 110 implementation score to meet DoD cybersecurity mandates. The work is classified as a subcontract under NAICS code 541611, with the primary place of performance located in New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on July 28, 2026, and responses are due by July 31, 2026, indicating a tight turnaround window for proposal submission. The contracting organization is the ASC Commodities Division under the Department of Defense, and while no specific point of contact or set-aside details are provided, the urgency and specificity of the compliance requirements suggest this is a high-priority acquisition aimed at strengthening the cybersecurity posture of defense supply chain systems. All work must be performed to meet DoD expectations for NIST 800-171 alignment without deviation.