Cybersecurity Compliance Assessment (NIST SP 800-171)

A cybersecurity compliance assessment is required for a system handling Controlled Unclassified Information (CUI), focusing on adherence to NIST SP 800-171 Rev 1 security controls. The scope includes a thorough evaluation of existing security measures, identification of gaps in compliance, and active support for remediation efforts to address deficiencies. The contractor must also prepare documentation for the Supplier Performance Risk System (SPRS) to ensure accurate representation of the system’s cybersecurity posture. This effort is critical to meeting federal requirements for protecting CUI and maintaining eligibility for DoD contracts. The work is to be performed at the specified location in Tracy, California, with a response deadline of May 20, 2026, under a subcontract arrangement tied to the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION and categorized under NAICS code 541611 for management, scientific, and technical consulting services.