Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract involves ensuring cybersecurity compliance by implementing the security controls outlined in NIST SP 800-171, aimed at protecting controlled unclassified information in nonfederal systems and organizations. Key deliverables include the development of a comprehensive System Security Plan (SSP) detailing the current security posture and planned corrective actions. Additionally, the contract requires the submission of assessment data to the Department of Defense’s Supplier Performance Risk System (SPRS) to demonstrate adherence to the cybersecurity requirements established by DFARS clauses 252.204-7012 and 252.204-7020. This subcontract opportunity, issued by the Department of Defense’s ASC Commodities Division, specifically targets contractors working under NAICS code 541512, related to computer systems design services. The work is to be performed at an FPO location with the ZIP code 96349-1100. The solicitation was posted on May 13, 2026, with a response deadline of May 21, 2026, emphasizing the critical need for timely submissions. The contract is part of the DoD’s broader efforts to enhance supply chain cybersecurity resilience and requires precise documentation and reporting to maintain compliance with federal acquisition regulations.