Cybersecurity Compliance (NIST SP 800-171)

The contract requires the execution of a NIST Special Publication 800-171 cybersecurity assessment to ensure compliance with federal standards for protecting covered defense information. The work involves a thorough documentation of existing security controls, identification of gaps, and preparation of a formal report to be submitted to the Supplier Performance Risk System (SPRS), which is critical for maintaining eligibility to handle sensitive defense data. The assessment must align precisely with NIST SP 800-171 requirements, covering all 110 security controls across 14 families, and must demonstrate proper implementation and operational effectiveness within the assessed environment. This is a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, with performance required at a location in Tracy, California, with a zip code of 95304-5000. The solicitation, posted on May 12, 2026, has a response deadline of May 20, 2026, indicating a tight turnaround for proposals. The NAICS code 541611 classifies the work under Management, Scientific, and Technical Consulting Services, emphasizing the need for specialized cybersecurity expertise. There is no set-aside designation indicated, and the contract does not specify a point of contact, implying that all communication and submission must follow standard DIBBS platform procedures through the provided UI link.