NIST SP 800-171 Cybersecurity Compliance Assessment

A comprehensive cybersecurity compliance assessment is required to evaluate a contractor’s information systems against the requirements of NIST SP 800-171 Rev 1 for the protection of Controlled Unclassified Information. The assessment must include a detailed gap analysis to identify areas where current controls do not meet the specified standards and must result in a formal submission to the Supplier Performance Risk System. This effort is essential for ensuring that the contractor’s environments are adequately secure to handle sensitive government data. The work is being conducted as a subcontract under the Department of Defense’s Fluid Handling Division, with performance centered in Jacksonville, Florida, 32212-0103. Responses are due by July 21, 2026, and the contract falls under NAICS code 541330, which pertains to computer systems design and related services. The solicitation was posted on July 16, 2026, and is accessible through the DIBBS platform.