NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires the performance of a comprehensive NIST SP 800-171 Revision 1 cybersecurity assessment to evaluate existing controls within the organization's information systems that handle controlled unclassified information. The scope includes identifying gaps in compliance, implementing necessary security controls to align with NIST standards, and documenting all changes to ensure full adherence to DFARS requirements. This effort is critical to achieving and maintaining a secure environment that meets federal cybersecurity mandates for defense contractors. The work must culminate in the preparation and submission of data to the Supplier Performance Risk System to demonstrate compliance and readiness for DoD contract obligations. The contract is structured as a subcontract under the Department of Defense’s Strategic Acquisition Program Directorate, with a NAICS code of 541611 indicating it falls under Management Consulting Services. The solicitation was posted on May 8, 2026, and responses are due by May 13, 2026. There is no specified place of performance or set-aside classification, and the work may be conducted remotely or at the contractor’s facility as long as the assessment and implementation objectives are met. The contractor must deliver a fully documented compliance posture that enables successful SPRS submission and validation by the Department of Defense without reliance on third-party certifications or external attestations.