NIST SP 800-171 Cybersecurity Compliance Assessment

A cybersecurity compliance assessment is required for systems handling Controlled Unclassified Information (CUI) in alignment with NIST SP 800-171 standards. The work involves evaluating the implementation and effectiveness of security controls, assigning maturity scores to measure compliance readiness, and generating formal reports through the Supplier Performance Risk System (SPRS) or other government-mandated reporting channels. The assessment must be conducted thoroughly to ensure all 110 controls outlined in NIST SP 800-171 are addressed and documented accurately. The contract is structured as a subcontract under the Department of Defense, specifically for the ASC Commodities Division, with performance obligated at Robins AFB, Georgia, 31098-1887. The NAICS code 541611 identifies the work as management and scientific consulting services, indicating the need for specialized technical expertise in cybersecurity frameworks. Submission of proposals is required by May 20, 2026, with the solicitation posted on May 12, 2026, through the DIBBS platform.