NIST SP 800-171 Compliance and CUI Handling Support

The contract requires the provision of advisory or managed services to achieve and maintain compliance with NIST SP 800-171 standards for systems that handle Controlled Unclassified Information CUI. This includes the development and maintenance of System Security Plans SSP and Plans of Action and Milestones POA&M to document security controls, track remediation efforts, and demonstrate ongoing compliance. The services must be delivered to ensure that all technical, administrative, and physical safeguards outlined in NIST SP 800-171 are properly implemented, monitored, and documented across covered systems. The work is specifically targeted at supporting Department of Defense systems within the Land Supply Chain organization. The contract is classified as a subcontract under NAICS code 541512 for Computer Systems Design Services and is set to be performed at a designated location in Tracy, California with ZIP code 95304-5000. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. No set-aside provisions or organizational type restrictions are specified. The work must be completed through a formal subcontracting arrangement and all deliverables must align with federal cybersecurity requirements for CUI protection. All activities must be executed to meet DoD expectations for readiness, auditability, and continuous compliance monitoring.