NIST SP 800-171 Cybersecurity Compliance Implementation & Assessment

The contract requires the implementation, assessment, and documentation of security controls outlined in NIST SP 800-171 to protect Controlled Unclassified Information within a system operating under the Department of Defense. The successful contractor must develop a comprehensive System Security Plan that details how each security control is addressed, submit a corresponding score to the Supplier Performance Risk System, and provide a detailed compliance roadmap outlining the steps, timelines, and responsibilities for achieving and maintaining full adherence to NIST standards. The work is to be performed at a specified location in Birmingham, Alabama with a zip code of 35217-5000 and is classified as a subcontract under NAICS code 541611 for Management Consulting Services. All deliverables must be completed and submitted by the response deadline of May 19, 2026, following the posting of the solicitation on May 11, 2026. The contracting entity is the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense, and the project demands precise alignment with federal cybersecurity requirements for CUI protection. The contractor is expected to demonstrate proven expertise in NIST 800-171 frameworks, risk assessment methodologies, and defense contractor compliance environments to ensure all security controls are not only implemented but also validated and sustainably maintained through documented processes and continuous monitoring practices.