Cybersecurity Compliance and NIST 800-171 Assessment

The contract entails the implementation and thorough documentation of NIST SP 800-171 controls for systems that manage covered defense information. This includes ensuring that all necessary cybersecurity measures are in place and compliant with the specified standards required by the Department of Defense. Additionally, the contractor is responsible for submitting an assessment score to the DoD's Supplier Performance Risk System (SPRS), which evaluates and tracks compliance levels. This subcontract opportunity, posted by the ASC Commodities Division of the Department of Defense, falls under the NAICS code 541512, indicating a focus on computer systems design and related services. The place of performance is located in Tracy, California, with responses due by May 13, 2026. The contract calls for specialized cybersecurity expertise to help maintain compliance with defense information security requirements and support the department's risk management efforts.