NIST SP 800-171 Compliance Assessment and Gap Analysis

The contract entails a thorough evaluation of information systems to ensure adherence to the NIST SP 800-171 standards, specifically targeting full compliance with all 110 security requirements. The scope includes identifying any compliance deficiencies, developing a detailed corrective action plan or roadmap, and preparing essential documentation such as the System Security Plan (SSP). Additionally, the contractor is responsible for facilitating the submission to the Supplier Performance Risk System (SPRS), ensuring the organization meets the necessary regulatory standards. Issued by the Department of Defense's Active Devices Division, this subcontract is aligned with the NAICS code 541611 and is focused on a place of performance in Tracy, California (zip code 95304-5000). The solicitation was posted on May 22, 2026, with a response deadline set for May 28, 2026. The contract aims to support the government in achieving full compliance in cybersecurity practices, which is critical for handling controlled unclassified information.