NIST SP 800-171 Cybersecurity Compliance Assessments

The contract requires conducting comprehensive NIST SP 800-171 Rev 1 compliance assessments for contractor information systems that handle Covered Defense Information, involving full system evaluations, detailed vulnerability analyses, and accurate submission of security ratings through the Supplier Performance Risk System. The work is focused on ensuring adherence to federal cybersecurity standards mandated for defense contractors, with assessments designed to identify gaps, mitigate risks, and validate control implementation across covered systems. The performance location is designated as Hill Air Force Base with a ZIP code of 84056-5734, and the effort falls under NAICS code 541612 for other scientific and technical consulting services. This is a subcontract opportunity issued by the Department of Defense under the Aviation Supply Chain, with a response deadline of May 1, 2026, and a posted date of April 23, 2026. There is no set-aside designation specified, and no point of contact information is provided in the data. All work must align strictly with NIST SP 800-171 Rev 1 requirements, and successful performance will include documenting compliance status, addressing identified weaknesses, and formally submitting findings to the SPRS portal to fulfill contractual and regulatory obligations.