NIST SP 800-171 Compliance and System Security Plan Development

The contract involves the implementation of NIST SP 800-171 security controls to ensure the protection of Controlled Unclassified Information (CUI). It includes the development and ongoing maintenance of a System Security Plan (SSP), conducting self-assessments, and submitting information to the Supplier Performance Risk System (SPRS) as part of compliance requirements. The contract is structured as a subcontract and is associated with the Department of Defense’s ASC Commodities Division, with the work to be carried out in Tracy, California. Key dates include the posting of the solicitation on May 13, 2026, and a response deadline set for May 21, 2026. The NAICS code assigned to the contract is 541611, which typically pertains to administrative management and general management consulting services. This contract focuses on cybersecurity compliance for government contractors handling sensitive but unclassified information, ensuring adherence to federal security standards and ongoing risk assessment through formal documentation and reporting processes.