Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contract seeks support for achieving and maintaining compliance with NIST SP 800-171 standards to protect Controlled Unclassified Information within a Department of Defense environment. The scope includes the development of a System Security Plan, conducting a self-assessment against the required security controls, and submitting the assessment results through the Supplier Performance Risk System. All activities must ensure the proper implementation of safeguards outlined in NIST SP 800-171 to secure CUI at the specified place of performance in Tracy, California, with a Zip Code of 95304-5000. This subcontract is part of a larger effort to enforce cybersecurity requirements across the defense supply chain. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026, under the NAICS code 541611 for Management Consulting Services. The contracting entity is the ASC Commodities Division under the Department of Defense, and performance is expected to be carried out at the designated location in Tracy. No set-aside type is indicated, and while point of contact information is not provided, all submissions must be made through the DIBBS platform via the referenced link. Failure to meet compliance obligations may impact the contractor’s ability to support DoD systems handling sensitive information.