Cybersecurity Compliance & NIST SP 800-171 Assessment Support

This contract involves providing consulting and implementation services geared toward achieving compliance with the NIST SP 800-171 cybersecurity standards. The primary responsibilities include developing a comprehensive System Security Plan (SSP), conducting self-assessments to evaluate security posture, and submitting the results to the Department of Defense’s Supplier Performance Risk System (SPRS). Additionally, the contractor will support cyber incident reporting requirements under the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, ensuring timely and accurate communication of any cybersecurity events. The opportunity is a subcontract issued by the Department of Defense's ASC Commodities Division, with the place of performance located in Tracy, California (zip code 95304-5000). The solicitation was posted on May 13, 2026, with a response deadline of May 18, 2026. The contract falls under NAICS code 541611, which covers administrative and general management consulting services, reflecting the professional and advisory nature of the work required.