NIST SP 800-171 Cybersecurity Compliance Assessment

A NIST SP 800-171 Rev 1 compliance assessment is being sought to evaluate a defense contractor’s cybersecurity posture, focusing on the review of the System Security Plan, identification of control gaps, and scoring of compliance status, with a target goal of achieving full adherence to the standard. The assessment will include a detailed analysis of current security controls against the 110 requirements outlined in NIST SP 800-171, resulting in a numerical score such as 105 out of 110, and will culminate in the official submission of results via the Supplier Performance Risk System. Support will be provided to implement corrective actions addressing identified deficiencies to close the compliance gap and ensure full alignment with federal cybersecurity mandates. The work is to be performed in Phoenix, Arizona, with a zip code of 85043, under a subcontract classification and is categorized under NAICS code 541611. The solicitation is managed by the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense and requires responses by May 7, 2026.