NIST SP 800-171 Cybersecurity Compliance Assessments

The contract involves performing cybersecurity assessments on defense contractor systems to ensure adherence to the NIST SP 800-171 standards. This includes evaluating existing security controls, identifying any gaps in compliance, calculating overall compliance scores, and compiling detailed assessment reports. These reports are then submitted to the Supplier Performance Risk System (SPRS) as part of the formal documentation process. The task is classified as a subcontract under NAICS code 541611 and is managed by the Department of Defense through the ASC Supplier Operations AE and AF Division. The work is to be performed at Fort Eustis, with a solicitation posted on May 13, 2026, and response submissions due by May 21, 2026. The contract supports the broader effort to maintain and monitor cybersecurity standards among defense contractors, ensuring that sensitive information and systems are adequately protected in accordance with federal requirements.