Cybersecurity Compliance (NIST SP 800-171) Assessment and Implementation

The contract requires the implementation of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information within the covered systems. The contractor must complete a comprehensive self-assessment of compliance with all 110 security requirements outlined in the standard, document findings, and submit the resulting scorecard to the Supplier Performance Risk System. The effort also includes ongoing support for the protection of CUI through technical and procedural measures, ensuring alignment with federal guidelines, as well as readiness to report any cyber incidents in accordance with applicable DoD protocols. The work is scoped under a Total Small Business Set-Aside, meaning only small businesses registered with the SBA are eligible to bid, and the performance location is designated as Tracy, California with a zip code of 95304-5000. The solicitation was posted on August 5, 2026, and responses are due by August 17, 2026, under the NAICS code 541512 for Computer Systems Design Services.