Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires the performance of a cybersecurity compliance assessment in accordance with NIST SP 800-171 to evaluate the contractor’s information systems and ensure the safeguarding of covered defense information. The assessment must be conducted thoroughly, addressing all required privacy and security controls outlined in the NIST standard, with findings submitted through the Supplier Performance Risk System (SPRS) to demonstrate compliance. The work is tied to a subcontract under the Department of Defense’s Land Supply Chain, with performance centered in Tracy, California, and the resulting data must be accurately reported to meet federal cybersecurity mandates. The solicitation is open for responses until July 27, 2026, with a posting date of July 15, 2026, indicating a limited window for submission. The North American Industry Classification System code 541512 classifies this as computer systems design and related services, underscoring the technical nature of the required work. While no specific set-aside status is designated, the nature of the task is restricted to contractors capable of executing authoritative cybersecurity evaluations. Failure to properly assess systems or submit accurate SPRS results may result in noncompliance penalties and potential loss of eligibility for future defense contracts.