NIST SP 800-171 Cybersecurity Compliance Assessments

The contract requires the conduct of cybersecurity assessments on defense contractor systems to determine compliance with NIST SP 800-171 standards, focusing on identifying gaps in security controls, calculating formal compliance scores, and producing detailed assessment reports for submission to the Supplier Performance Risk System. The work involves evaluating the implementation of required safeguards across information systems, ensuring alignment with federal cybersecurity requirements for contractors handling Controlled Unclassified Information, and delivering actionable findings to support remediation and compliance validation. The assessment activities are tied to a subcontract under the Department of Defense, with performance centered at Fort Eustis, Virginia, under the agency designation ASC SUPPLIER OPER AE AND AF DIV. The solicitation was posted on May 13, 2026, with proposals due by May 21, 2026, and falls under NAICS code 541611 for management, scientific, and technical consulting services. Successful responders must demonstrate expertise in NIST 800-171 compliance methodologies, experience with SPRS reporting requirements, and the ability to deliver accurate, audit-ready documentation that meets rigorous defense contract standards.