NIST SP 800-171 Cybersecurity Compliance Services

The contract involves implementing and maintaining cybersecurity controls to safeguard Controlled Unclassified Information (CUI) in alignment with the requirements of NIST SP 800-171 Revision 1. Key tasks include conducting a gap assessment, developing a comprehensive System Security Plan (SSP), and ensuring the organization meets a Supplier Performance Risk System (SPRS) score of 110, which reflects compliance and security effectiveness. This work is critical to reinforcing the security posture of systems handling sensitive but unclassified defense-related information. The contract is issued as a subcontract by the Department of Defense's ASC Commodities Division, with the place of performance at Tinker Air Force Base, zip code 73145-8000. The solicitation was posted on May 12, 2026, with a response deadline of May 20, 2026. It falls under NAICS code 541512, which pertains to computer systems design services. The contract’s goal is to ensure that cybersecurity controls adhere strictly to federal standards, thus supporting the Department of Defense’s efforts to protect vital information and maintain operational security.