NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a thorough evaluation of a contractor’s information systems to verify adherence to NIST SP 800-171 Rev 1 standards for safeguarding Controlled Unclassified Information. This includes a detailed assessment of all applicable security controls, identification of gaps in current practices, and the development of a comprehensive Plan of Action and Milestones to address deficiencies. The assessment must align with federal requirements for protecting CUI and ensure the contractor maintains a robust cybersecurity posture compliant with Department of Defense directives. The work is structured as a subcontract under the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION, with performance expected to occur in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation, identified under NAICS code 541611, was posted on May 12, 2026, and responses are due by May 20, 2026. The effort is focused on achieving full compliance through systematic analysis and documentation, ensuring the contractor can securely handle, store, and transmit CUI in accordance with federal cybersecurity frameworks.