Cybersecurity Assessment for CUI Compliance

The contract requires conducting cybersecurity assessments of defense contractor information systems to ensure compliance with NIST SP 800-171 standards for safeguarding Controlled Unclassified Information. The work involves evaluating the effectiveness of security controls implemented by subcontractors and documenting the findings through three critical deliverables: a System Security Plan, a Plan of Action and Milestones, and a CMMC Level 2 assessment report. These documents must be submitted to the Supplier Performance Risk System to validate readiness and compliance with federal cybersecurity requirements. The assessment must be performed at the designated place of performance in Barstow, California, with a zip code of 92311-5014. The solicitation is classified as a subcontract under NAICS code 541611 and is issued by the Department of Defense through the Land Supply Chain organization. Proposals must be submitted by the stated deadline on May 22, 2026, to be considered for award.