NIST SP 800-171 Cybersecurity Compliance Assessment and Reporting

The contract requires the execution of a comprehensive NIST SP 800-171 Rev 1 cybersecurity assessment for systems that handle Controlled Unclassified Information, ensuring alignment with federal cybersecurity standards. The scope includes developing a detailed System Security Plan that documents the implementation of required security controls, documenting the current state of compliance, and identifying gaps or deficiencies. All findings must be formally reported to the Supplier Performance Risk System, with accompanying corrective action plans that outline timelines, responsible parties, and remediation strategies to address any non-compliance issues. This work is critical for maintaining the integrity and security of sensitive data within DoD-contracted systems. The opportunity is structured as a subcontract under the Department of Defense’s Electrical Devices Division, with performance expected to occur in Bremerton, Washington, at the postal code 98314-6001. It falls under the NAICS code 541611, indicating it is for management consulting services, specifically related to administrative management and general management consulting. The solicitation was posted on May 8, 2026, with a firm response deadline of May 13, 2026. While the solicitation number is not provided, the contract can be accessed online through the DIBBS portal using the referenced link. There is no set-aside designation specified, and no point of contact details are included in the data provided.