NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a comprehensive cybersecurity assessment of a contractor’s information system to ensure full compliance with NIST Special Publication 800-171 standards for protecting Controlled Unclassified Information. The assessment must evaluate all applicable security controls, identify gaps, and document remediation plans to meet federal requirements. The contractor is expected to deliver a complete system security plan that outlines policies, procedures, and technical safeguards, along with a detailed assessment score reflecting the system’s current compliance posture and a finalized submission to the Supplier Performance Risk System. All work must be completed and delivered by the response deadline of May 14, 2026, with performance taking place at the FPO location with ZIP code 96310-7161. This subcontract is classified under NAICS code 541611, indicating it involves management, scientific, and technical consulting services, and is issued by the Department of Defense’s Aviation Supply Chain ESOC Buys office.