Subcontracted Cybersecurity for Lower-Tier Suppliers

The contract is for cybersecurity compliance support services aimed at subcontractors who lack current NIST SP 800-171 assessments, focusing on enabling them to meet federal cybersecurity requirements. Services include conducting Basic Assessments, preparing and submitting documentation to the Supplier Performance Risk System, and providing rebuttals for any documentation issues or noncompliance findings. The goal is to ensure lower-tier suppliers can successfully demonstrate compliance with cybersecurity standards required under Department of Defense contracts. The work is tied to a subcontracting arrangement under the ASC SUPPLIER OPER OEM DIVISION, operating under the broader Department of Defense umbrella, and is governed by NAICS code 541611 for management consulting services. The solicitation is open for responses until July 27, 2026, with the posting date listed as July 6, 2026, and the performance location is not specified, indicating potential nationwide or multi-site involvement. No set-aside type is designated, meaning the contract is open to all eligible vendors regardless of business size or ownership type. Interested parties must engage through the DIBBS portal via the provided link, and there is no designated point of contact listed in the public data, suggesting inquiries may need to go through general procurement channels. The contract does not specify financial value or duration, focusing instead on the scope of compliance support activities required to bring subcontractors into alignment with NIST 800-171 standards.