NIST SP 800-171 Compliance & SPRS Assessment Support

The contract seeks a subcontractor to assist the prime contractor in achieving full compliance with NIST SP 800-171 Rev 1 standards, focusing on the implementation of required security controls for protecting controlled unclassified information within nonfederal systems. The subcontractor will be responsible for conducting a comprehensive self-assessment of the prime contractor’s current cybersecurity posture, identifying gaps in compliance, and developing a corrective action plan to address deficiencies. This includes evaluating policies, procedures, and technical controls to ensure alignment with the 110 security requirements outlined in the standard. Additionally, the subcontractor must prepare all necessary documentation for submission to the Department of Defense Supplier Performance Risk System, ensuring accuracy, completeness, and timeliness to meet the DoD’s reporting requirements. Performance is expected to be executed with precision under the specified place of performance in Tracy, California, with all deliverables due prior to the response deadline of May 20, 2026. The work falls under NAICS code 541611 for management consulting services and is structured as a subcontract under the ASC Commodities Division of the Department of Defense, with no set-aside designation specified.