NIST SP 800-171 Cybersecurity Compliance Assessment

This contract requires the execution of a NIST SP 800-171 cybersecurity compliance assessment to ensure adherence to Department of Defense standards for protecting Controlled Unclassified Information. The scope includes a thorough evaluation of existing security controls, identification of gaps in compliance, and the creation of a comprehensive System Security Plan that documents the organization’s cybersecurity posture and implemented safeguards. In addition, a detailed Plan of Action and Milestones must be developed to outline corrective actions, assign responsibilities, establish timelines, and track progress toward full compliance with the NIST framework. The engagement is structured as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and is classified under NAICS code 541611 for management and technical consulting services. The assessment must align with federal requirements for CUI handling and be performed in accordance with NIST-specific guidelines to support DOD supply chain security objectives. While no specific location is designated for performance, the work must satisfy all regulatory and procedural expectations established by the DOD and result in documented, audit-ready deliverables that demonstrate measurable progress toward cybersecurity compliance.