Cybersecurity Compliance and NIST SP 800-171 Assessment

The contractor is required to perform and document a comprehensive NIST SP 800-171 assessment of its information technology systems to validate compliance with the cybersecurity requirements outlined in DFARS 252.204-7012 and 7020. This assessment must be conducted systematically, ensuring all controlled unclassified information handling practices are evaluated against the NIST standard’s 110 security controls, and all findings must be thoroughly documented to support submission to the Supplier Performance Risk System. The contractor is held accountable for ensuring accuracy and completeness in both the assessment process and the final reporting, as noncompliance may result in contractual penalties or loss of eligibility for DoD work. This subcontract is issued under the agency name DLA DIST SAN JOAQUIN, part of the Department of Defense, with performance required at the location in Tracy, California, zip code 95304-5000. The solicitation is classified under NAICS code 541512, indicating it pertains to computer systems design services, and is designated as a subcontract with no specific set-aside type. The response deadline is set for July 31, 2026, and all submissions must be completed by this date to be considered. The contract is accessible via the DIBBS portal under solicitation number SPE7MC26T9057, and failure to meet the assessment and reporting obligations will constitute a breach of contractual requirements.