NIST SP 800-171 Cybersecurity Compliance Support

The contract requires comprehensive cybersecurity compliance services for systems that handle Controlled Unclassified Information, with a primary focus on aligning with the NIST SP 800-171 security requirements. This includes conducting System Security Plan assessments, implementing necessary controls, documenting compliance evidence, and supporting the Supplier Performance Risk System scoring process to ensure the contractor meets federal cybersecurity standards. The work is being performed under a subcontract arrangement for the Department of Defense, specifically under the Aviation Supply Chain ESOC Buys organization, with performance taking place at an FPO location identified by ZIP code 09523. The solicitation, posted on May 10, 2026, has a response deadline of May 18, 2026, and falls under NAICS code 541512 for computer systems design services. While no specific set-aside designation is indicated, the nature of the work requires specialized expertise in federal cybersecurity frameworks and documentation rigor. The contractor must be prepared to deliver timely, accurate, and audit-ready materials that validate adherence to NIST 800-171 controls across all applicable systems, ensuring continued authorization to process CUI for an DoD prime contract. All deliverables must be completed within the contract timeframe and meet the DoD’s stringent compliance expectations.