Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the implementation of a comprehensive cybersecurity compliance assessment in accordance with NIST Special Publication 800-171, aimed at evaluating the protection of controlled unclassified information within the contractor’s systems. The scope of work includes developing a detailed System Security Plan that documents the security controls in place, identifies gaps, and outlines mitigation strategies to meet federal cybersecurity standards. The assessment must be thorough, aligning with all relevant NIST 800-171 requirements, and must be supported by verifiable evidence of control implementation across the assessed environment. Upon completion of the assessment and SSP development, all findings and documentation must be formally submitted to the Supplier Performance Risk System to ensure regulatory compliance and visibility within the Department of Defense’s supply chain risk management framework. The work is designated under a subcontract and is tied to the NAICS code 541611, reflecting its focus on administrative management and general management services related to cybersecurity. Performance is expected to be conducted in Tracy, California, with a strict deadline for response submission by July 24, 2026, underscoring the urgency and time-sensitive nature of the deliverables. The contracting office is part of the Fluid Handling Division within the Department of Defense, indicating the assessment is critical to maintaining secure operations for defense-related fluid handling systems.