NIST SP 800-171 Cybersecurity Compliance Assessment & Reporting

This contract involves performing a comprehensive NIST SP 800-171 compliance assessment for a Department of Defense contractor, focusing on identifying gaps in current cybersecurity practices and developing a System Security Plan to address those deficiencies. The service provider is expected to conduct a thorough gap analysis, formulate detailed remediation strategies, and support the submission to the Supplier Performance Risk System (SPRS) with the goal of achieving a target compliance score of 110. The project is categorized under NAICS code 541611 and is structured as a subcontract opportunity issued by the ASC Commodities Division of the Department of Defense. The work will be performed at the Point Mugu Naval Air Weapons Station (NAWC) location, under a tight schedule with proposals due within eight days of the contract posting on May 10, 2026. This engagement aims to ensure the contractor meets federal cybersecurity requirements critical to safeguarding controlled unclassified information within defense supply chains. The contract emphasizes compliance, risk mitigation, and clear reporting, making it crucial for contractors to possess expertise in government cybersecurity standards and federal reporting systems.