NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a comprehensive cybersecurity assessment to verify compliance with NIST Special Publication 800-171 Revision 1 for systems that process, store, or transmit Controlled Unclassified Information. This includes the development of a complete System Security Plan that documents how security controls are implemented and maintained to protect CUI. The assessment must evaluate the current security posture, identify gaps in compliance, and recommend corrective actions to meet all 110 security requirements outlined in the NIST guideline. Final deliverables must be submitted to the Supplier Performance Risk System to satisfy federal contracting obligations. The work is classified as a subcontract under NAICS code 541611, with a performance location at Tobyhanna, Pennsylvania, 18466-5050. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026. The contracting entity is the Department of Defense, specifically the ASC SUPPLIER OPER AE AND AF DIV, which is seeking external expertise to ensure its systems adhere to federal cybersecurity standards. Compliance is mandatory for continued eligibility to handle CUI under federal contracts, and failure to meet requirements may result in suspension of performance or loss of contract standing.