NIST SP 800-171 Compliance and System Security Plan Development

The contract requires the implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information across systems and operations, with a focus on establishing a robust security posture aligned with federal standards. This includes the comprehensive development and ongoing maintenance of a System Security Plan that documents the organization’s security policies, procedures, and control implementations specific to CUI handling. The contractor is responsible for conducting a thorough self-assessment of compliance with all 110 NIST SP 800-171 requirements and submitting the results through the Supplier Performance Risk System to demonstrate adherence and readiness for DoD contractual obligations. The work is scoped under a subcontract for the ASC Commodities Division under the Department of Defense, with performance taking place in Tracy, California, at the zip code 95304-5000. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026, with the North American Industry Classification System code 541611 indicating that the work falls under Management, Scientific, and Technical Consulting Services. This engagement demands meticulous documentation, continuous compliance monitoring, and accurate reporting to ensure CUI remains protected throughout the lifecycle of the contract.