Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contract requires the completion of a NIST SP 800-171 cybersecurity assessment to ensure compliance with DFARS requirements prior to contract award. The successful offeror must evaluate the organization’s information systems against the NIST framework’s security controls and prepare a System Security Plan and other documentation necessary for submission to the Supplier Performance Risk System. This effort is critical to demonstrate readiness for handling controlled unclassified information in alignment with federal defense contracting standards. The work is tied to a subcontract under the Department of Defense’s Fluid Handling Division, with performance expected to take place in Tracy, California, ZIP 95304-5000. The opportunity is solicited as a subcontract with a response deadline of August 6, 2026, and was posted on July 26, 2026. It falls under the NAICS code 541512 for Computer Systems Design Services, indicating the scope involves technical consultation and implementation of cybersecurity controls rather than hardware procurement or general IT support. There is no set-aside designation indicated, and the submission must be completed through the DIBBS portal using the provided solicitation number SPE7M426T286K. Timely and accurate compliance documentation submission is essential, as failure to meet these requirements will likely disqualify the bidder from award consideration.