Cybersecurity Assessment & NIST SP 800-171 Compliance Reporting

The contract requires performing a self-assessment of information systems following the guidelines of NIST SP 800-171 Revision 1 to ensure the protection of Controlled Unclassified Information (CUI). The contractor must develop a comprehensive System Security Plan (SSP) documenting the current security posture and compliance measures. Following the assessment and plan preparation, the results must be submitted to the Department of Defense’s Supplier Performance Risk System (SPRS) and the System for Award Management (SAM.gov). This subcontract opportunity, posted by the ASC Commodities Division under the Department of Defense, is categorized under NAICS code 541611 and is based in Tracy, California, with ZIP code 95304-5000. The posting date is May 15, 2026, with responses due by May 20, 2026. The contract focuses on cybersecurity assessment and compliance reporting essential for maintaining DoD standards regarding sensitive information security.