NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires the performance of cybersecurity assessments to verify compliance with NIST SP 800-171 Rev 1 for systems that process, store, or transmit Controlled Unclassified Information. The scope includes conducting a thorough gap analysis to identify deficiencies in current security controls, validating the implementation and effectiveness of required safeguards, and preparing submissions to the Supplier Performance Risk System to document compliance status. The work must be completed in alignment with federal cybersecurity standards for protecting CUI and is intended to support organizational readiness and regulatory adherence. This subcontract is issued under the NAICS code 541618 and is managed by the Department of Defense through the SUBSISTENCE FSE SUPPLY CHAIN organization. The place of performance is designated as FPO with a ZIP code of 09591, indicating operations may involve overseas or mobile military locations. The solicitation was posted on May 11, 2026, with a firm response deadline of May 15, 2026, leaving a narrow window for proposers to submit qualifications and approach details. No set-aside provisions or specific organizational type requirements are indicated, and the point of contact details are not provided in the available data.