Cybersecurity Assessment for CUI Compliance

This contract involves performing comprehensive cybersecurity assessments on defense contractor information systems to ensure compliance with NIST SP 800-171 standards, specifically focusing on protecting Controlled Unclassified Information (CUI). The contractor is required to deliver several key documents including a System Security Plan (SSP), a Plan of Action and Milestones (POA&M), and a Cybersecurity Maturity Model Certification (CMMC) Level 2 assessment report. These deliverables must be submitted to the Supplier Performance Risk System (SPRS). Issued by the Department of Defense's Land Supply Chain office, the subcontract pertains to NAICS code 541611 and is to be performed at a specified location in Barstow, with the postal code 92311-5014. The solicitation was posted on May 11, 2026, with responses due by May 22, 2026. The primary objective is to assess and verify the cybersecurity posture of defense contractors in protecting sensitive defense information in accordance with federal standards, ensuring readiness and compliance for ongoing and future defense contracts.