Cybersecurity Self-Assessment Services (NIST SP 800-171 Compliance)

The contract involves providing cybersecurity self-assessment services to evaluate contractor information systems against the NIST SP 800-171 security standards. These assessments can be conducted at basic, medium, or high levels to identify any compliance deficiencies. The contractor is responsible for producing detailed assessment reports and assisting with the submission of findings to the Supplier Performance Risk System (SPRS). This subcontract is issued by the Department of Defense, specifically through the ASC Supplier Operations AE and AF Division, with performance required in Tracy, California. The solicitation was posted in mid-May 2026, with a short response deadline of five days, reflecting the urgent nature of the requirements. The work falls under NAICS code 541611, which covers administrative management and general management consulting services.