Cybersecurity Compliance (NIST SP 800-171 Assessment and Reporting)

The contract requires the implementation, assessment, and reporting of NIST SP 800-171 cybersecurity controls to protect Covered Defense Information in alignment with Department of Defense requirements. The work focuses on ensuring compliance with the full scope of NIST guidelines, including the proper configuration, monitoring, and documentation of security controls necessary to safeguard sensitive government data handled by the contractor. Assessment activities must validate adherence to all 110 controls outlined in the framework, and detailed reporting is mandatory to demonstrate full compliance to the DoD. Performance is expected to occur at Tracy, California, with a zip code of 95304-5000, and the contract is classified as a subcontract under NAICS code 541611, indicating it involves management, scientific, and technical consulting services. The solicitation was posted on July 13, 2026, with a response deadline of July 21, 2026. The contracting office is the ASC Supplier Oper OEM Division under the Department of Defense, and all deliverables must align strictly with federal cybersecurity standards for defense contractors handling controlled unclassified information.