NIST SP 800-171 Cybersecurity Compliance Assessment

This contract requires a thorough assessment of a contractor’s information systems to verify compliance with NIST SP 800-171 Revision 1 standards, which address the protection of Controlled Unclassified Information (CUI). The work involves evaluating the implementation of security controls specified in the standard and developing a Plan of Action and Milestones (POA&M) to address any identified deficiencies. The effort is essential to ensure that the contractor meets stringent cybersecurity requirements set forth by the Department of Defense for handling sensitive but unclassified data. The contract, titled "NIST SP 800-171 Cybersecurity Compliance Assessment," is a subcontract opportunity posted on May 12, 2026, with a response deadline of May 20, 2026. The work will be performed primarily in New Cumberland, ZIP code 17070-5002. This opportunity falls under NAICS code 541611, typically associated with administrative management and general management consulting services. The contracting agency is the Department of Defense’s ASC Supplier Operating OEM Division, reflecting the critical importance of securing defense-related supply chains through regulatory compliance.