NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires performing cybersecurity compliance assessments for Department of Defense systems in accordance with NIST SP 800-171, DFARS 252.204-7012, and FAR requirements. The work involves reviewing System Security Plans, conducting gap analyses to identify deviations from mandated controls, and ensuring adherence to federal cybersecurity standards for protected information. Assessments must evaluate the implementation of security controls across DoD contractor systems that handle controlled unclassified information. This is a subcontract under the Department of Defense's COMMODITIES DIVISION, with performance located in New Cumberland, PA, 17070-5002. The solicitation was posted on May 12, 2026, with a response deadline of May 20, 2026, and falls under NAICS code 541611 for management consulting services. The contract is not subject to any set-aside preferences and is part of the broader DIBBS procurement system, indicating the need for precise compliance documentation and timely submission to meet DoD cybersecurity obligations.