Cybersecurity Compliance and Reporting (NIST SP 800-171)

This subcontract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to ensure compliance with Department of Defense standards. The contractor must conduct regular self-assessments to verify adherence to these controls and promptly report any cyber incidents within 72 hours to the Supply Chain/Procurement Risk System (SPRS). The primary focus is on protecting controlled unclassified information in non-federal systems and organizations. Issued by the ASC Commodities Division of the Department of Defense, the contract is designated under NAICS code 541512 and pertains to services performed at a location in Tracy, California (zipcode 95304-5000). The solicitation was posted on May 22, 2026, with a response deadline of May 28, 2026. This opportunity is structured as a subcontract and emphasizes strict cybersecurity compliance and timely incident reporting to support DoD supply chain risk management requirements.