NIST SP 800-171 Cybersecurity Compliance Assessment

The contract involves performing a cybersecurity assessment for a contractor information system that manages Controlled Unclassified Information (CUI), ensuring compliance with NIST SP 800-171 standards and DFARS 252.204-7012 requirements. The work is intended to verify that the contractor's security controls meet federal regulations designed to protect sensitive defense information. The key deliverables include a comprehensive System Security Plan (SSP) detailing the security posture and the formal submission of assessment results to the Supplier Performance Risk System (SPRS). This subcontract opportunity, posted by the Department of Defense's ASC Commodities Division, is focused on the NAICS sector 541612, implying specialized professional services in cybersecurity consulting. The place of performance is identified as Hill Air Force Base (HILL AFB) in Utah. Responses to the solicitation are due by May 19, 2026, following the posting date of May 11, 2026. Prospective contractors are expected to meet the stringent compliance criteria and documentation standards critical to maintaining secure information systems within defense supply chains.