NIST SP 800-171 Compliance Assessment and Implementation

The contract requires the assessment and implementation of NIST SP 800-171 cybersecurity safeguards to ensure the protection of Controlled Unclassified Information (CUI) within the designated system environment. This includes developing a comprehensive System Security Plan (SSP) that documents all security controls and their implementation status, with the explicit goal of achieving a perfect score of 110 out of 110 on the Supplier Performance Risk System (SPRS). The work must be performed in San Diego, California, at the specified ZIP code, and is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION. The North American Industry Classification System code 541512 indicates this effort falls under computer systems design and related services, emphasizing technical expertise in cybersecurity compliance. All proposals must be submitted by May 4, 2026, and the contract is open to qualified subcontractors capable of delivering full NIST 800-171 compliance with documented evidence of control implementation and verification.