Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract entails the development of a System Security Plan (SSP), a Plan of Action and Milestones (POA&M), and the execution of a NIST SP 800-171 self-assessment with a minimum required score of 110 for submission to the Supplier Performance Risk System (SPRS). This effort is focused on ensuring cybersecurity compliance within the framework outlined by the Department of Defense, specifically targeting the Maritime Supply Chain sector. The work will be performed as a subcontract in Tracy, California, with the NAICS code 541611, which relates to administrative management and general management consulting services. The contract was posted on May 22, 2026, with a response deadline of May 28, 2026, indicating a short window for proposals. Although there is no specified type of set-aside or designated organization type, the contract involves critical compliance deliverables essential for maintaining DoD cybersecurity standards. The prime agency overseeing this effort is the Department of Defense, emphasizing the sensitivity and importance of maintaining robust cybersecurity documentation and compliance scores for supplier evaluation and risk management.