NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires the performance of cybersecurity assessments on contractor systems to ensure compliance with NIST Special Publication 800-171 Rev 1, specifically focused on safeguarding Controlled Unclassified Information. The scope includes evaluating the implementation and effectiveness of required security controls, assigning compliance scores, and submitting formal reports through the Department of Defense Supplier Performance Risk System. The work must be conducted in accordance with federal cybersecurity standards to validate that contractor environments adequately protect sensitive data handled under DoD contracts. This is a subcontract under the Department of Defense, issued by the ASC SUPPLIER OPER OEM DIVISION, with performance expected to occur at Cherry Point, North Carolina, zip code 28533-5040. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. The North American Industry Classification System code of 541611 indicates the work falls under Computer Systems Design and Related Services. The contract is not designated for any specific set-aside, meaning it is open to all eligible contractors without preferential treatment based on business size or category.