NIST SP 800-171 Cybersecurity Compliance Implementation

The contract requires the implementation and documentation of cybersecurity compliance with NIST SP 800-171 for systems that handle Controlled Unclassified Information, ensuring all required security controls are properly applied and verified. This includes the development of a comprehensive System Security Plan detailing how each control is met and the creation of a Plan of Action and Milestones to address any gaps or deficiencies, with clear timelines and responsible parties. The work must be executed in alignment with federal cybersecurity standards and documented to demonstrate full adherence to the framework across all relevant systems. This is a subcontract under the Department of Defense’s ASC Commodities Division, with a NAICS code of 541611 indicating it relates to scientific and technical consulting services. The solicitation was posted on April 26, 2026, with responses due by May 4, 2026. While specific location details are not provided, performance is expected to support DoD systems handling CUI, and the contractor must demonstrate capability in delivering compliant cybersecurity documentation and remediation planning without reliance on external citations or proprietary frameworks beyond NIST SP 800-171.