NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a cybersecurity assessment of unclassified information systems to ensure full compliance with NIST Special Publication 800-171 Revision 1, focusing on the implementation of security controls designed to protect controlled unclassified information. The vendor must develop a comprehensive system security plan outlining how each required control is addressed, implemented, and maintained within the system environment. This plan must accurately reflect current security postures and include evidence of adherence to the framework's guidelines. All findings from the assessment must be documented and submitted to the Supplier Performance Risk System to provide official scoring and validation of compliance status. The work is scoped as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at Anniston, Alabama, 36201-5021. The North American Industry Classification System code for this effort is 541612, indicating it falls under computer systems design and related services. The solicitation was posted on May 6, 2026, and responses are due by May 14, 2026. While no set-aside designation or point of contact is specified, the timing and location suggest urgency and a need for immediate readiness in meeting DOD cybersecurity requirements for unclassified systems.