NIST SP 800-171 Cybersecurity Compliance Assessment

The contract calls for a comprehensive compliance assessment of a defense contractor’s system security plan aligned with NIST SP 800-171 Rev 1 requirements, focusing on the evaluation of all required security controls, accurate scoring of compliance status, and submission of findings through the Supplier Performance Risk System. The assessment must scrutinize the contractor’s implementation of controls related to access, configuration, audit, identity management, and data protection to ensure alignment with federal standards for safeguarding controlled unclassified information. Results will be used to determine the contractor’s readiness and risk posture under Department of Defense cybersecurity mandates. This subcontract is issued by the Defense Logistics Agency under the NAICS code 541611, which pertains to management consulting services, and is targeted toward entities capable of delivering technical cybersecurity evaluation services. The solicitation was posted on July 8, 2026, with a firm response deadline of July 13, 2026, indicating a tight turnaround for qualified vendors to submit proposals. The place of performance and point of contact information are not specified, suggesting the work may be conducted remotely or at the contractor’s facility. All deliverables must be submitted through the DIBBS platform, as indicated by the provided URL, and failure to meet the deadline or compliance criteria will result in disqualification.