NIST SP 800-171 Cybersecurity Compliance Assessment

This contract involves performing a comprehensive cybersecurity assessment of contractor systems that manage Controlled Unclassified Information (CUI) to ensure compliance with the requirements outlined in NIST SP 800-171 Revision 1. The scope includes evaluating existing security controls, reviewing the System Security Plan (SSP), and assessing the Plan of Action and Milestones (POA&M). The objective is to verify that these systems adequately protect sensitive information in accordance with Department of Defense standards. The contract, classified as a subcontract under NAICS code 541611, is issued by the Department of Defense's ASC Supplier Operations Aviation Engineering and AF Division. It was posted on May 13, 2026, and responses are due by May 21, 2026. While specific location details and a point of contact are not provided, the contract information and solicitation can be accessed through the official DoD procurement website. The assessment will play a critical role in maintaining the cybersecurity posture of contractors supporting defense-related activities.