NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a comprehensive cybersecurity assessment of the contractor’s information systems aligned with NIST SP 800-171 Rev 1 standards to verify compliance with Controlled Unclassified Information (CUI) protection requirements. The assessment must evaluate all relevant security controls, identify gaps, and validate the implementation of safeguards designed to protect CUI stored, processed, or transmitted within the contractor’s systems. A formal compliance report must be prepared and submitted to the government, detailing findings, remediation status, and readiness for federal oversight. This engagement is structured as a subcontract under the Department of Defense, with performance occurring at Little Rock Air Force Base, 72099-5300. The solicitation was posted April 30, 2026, and responses are due by May 6, 2026, under NAICS code 541611 for management, scientific, and technical consulting services.