NIST SP 800-171 Cybersecurity Compliance Assessment & Remediation

This contract seeks a subcontractor to perform a cybersecurity compliance assessment and remediation for Department of Defense contractor systems operating at Robins Air Force Base, ensuring alignment with NIST SP 800-171 standards. The scope includes conducting a comprehensive gap analysis to identify deficiencies in existing security controls, developing a detailed Plan of Action and Milestones to address identified weaknesses, and managing reporting through the Supplier Performance Risk System to demonstrate compliance status. The work is critical for maintaining the security of controlled unclassified information on DoD contractor networks and must be completed in accordance with federal cybersecurity mandates. The solicitation was posted on May 12, 2026, with responses due by May 20, 2026, and falls under NAICS code 541611 for management consulting services. The contract is structured as a subcontract and is associated with the ASC Commodities Division of the Department of Defense. All performance activities are required to occur at the designated location, Robins AFB, Georgia, with final deliverables tied to official DoD reporting systems. While no set-aside information is provided, contractors must possess the technical expertise to execute NIST 800-171 compliance tasks, including documentation, remediation planning, and SPRS submission, under strict timelines and operational constraints.