NIST SP 800-171 Cybersecurity Compliance Assessment

The contract involves conducting NIST SP 800-171 compliance assessments for systems that manage Controlled Unclassified Information (CUI). This includes evaluating system security controls, assigning compliance scores, developing System Security Plans (SSPs), and completing Supplier Performance Risk System (SPRS) reporting. The work is focused on ensuring that subcontractors meet the stringent cybersecurity requirements outlined by the Department of Defense to protect sensitive information. Issued by the Department of Defense's Land Supply Chain division, the subcontract is designated under NAICS code 541611, which pertains to administrative management and general management consulting services. The place of performance is in New Cumberland, with a specified ZIP code of 17070-5002. The solicitation was posted on May 15, 2026, with responses due by May 20, 2026. This contract presents an opportunity for entities capable of delivering thorough cybersecurity assessments and documentation for DoD-related supply chain systems handling CUI.