Cybersecurity Compliance Assessment – NIST SP 800-171

The contract involves conducting a cybersecurity compliance assessment focused on adherence to the NIST SP 800-171 standards, specifically for systems managing Controlled Unclassified Information (CUI). The scope includes evaluating the current security measures, preparing thorough documentation of the findings, and completing the Supplier Performance Risk System (SPRS) reporting. This effort aims to ensure that the contractor’s systems meet required federal cybersecurity guidelines to protect sensitive information effectively. Issued by the Department of Defense’s ASC Commodities Division, this subcontract opportunity was posted on May 13, 2026, with responses due by May 21, 2026. The work is to be performed in Tracy, California, under NAICS code 541611, which pertains to administrative management and general management consulting services. The contract supports the Department of Defense’s ongoing commitment to safeguarding information systems through rigorous compliance and risk assessment processes.