Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires execution of a NIST SP 800-171 self-assessment to evaluate cybersecurity controls within the organization’s systems, document the implementation status of each required control, and submit the resulting score to the Supplier Performance Risk System. Compliance with NIST SP 800-171 is mandatory and must be accurately reflected in the submitted assessment to meet federal cybersecurity standards for handling controlled unclassified information. Ongoing support is expected to maintain continuous compliance, including timely updates to control documentation and prompt reporting of any cybersecurity incidents in accordance with applicable regulatory requirements. The work is tied to a subcontract under the Department of Defense’s Fluid Handling Division, with performance centered at Tracy, California, 95304-5000. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026, under NAICS code 541512 for computer systems design services.