NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a thorough evaluation of contractor information systems to ensure alignment with the National Institute of Standards and Technology Special Publication 800-171 Revision 1, focusing on the protection of controlled unclassified information. The assessment must include a detailed gap analysis to identify deficiencies in current cybersecurity controls, a scoring mechanism to quantify compliance levels across all required security requirements, and a formal reporting structure that clearly documents findings, risks, and recommended remediation actions. The work is structured as a subcontract under the Department of Defense and falls under NAICS code 541611, indicating it involves administrative management and general management consulting services. Responses must be submitted by May 4, 2026, with the solicitation posted on April 24, 2026. The performance location is not specified, and there is no set-aside designation mentioned, meaning the opportunity is open to all eligible contractors. The contract is managed through the Defense Logistics Agency’s DIBBS system under solicitation number SPE4A726Q0629. The assessment must be conducted with rigor and precision to meet federal cybersecurity standards, as noncompliance could impact the contractor’s eligibility for future DoD work or risk exposure of sensitive information.