NIST SP 800-171 Compliance Assessment and Reporting

The contract requires the contractor to perform a self-assessment of their information systems against the NIST SP 800-171 Rev. 1 security requirements, documenting all findings related to compliance gaps and control deficiencies. The contractor must implement corrective actions to address each identified non-compliance issue and ensure all security controls are properly configured and operational. The assessment process must be thorough and aligned with the standards outlined in the NIST publication, covering all applicable family controls designed to protect controlled unclassified information. Upon completion of the assessment and remediation, the contractor is obligated to submit official scores and supporting documentation to the Department of Defense via the Supplier Performance Risk System. The work must be conducted in accordance with DoD expectations, with performance centered on the Tracy, CA location. The solicitation is classified as a subcontract under NAICS code 541611, with a response deadline of May 20, 2026, and was posted on May 12, 2026, under the ASC SUPPLIER OPER OEM DIVISION, indicating this effort is part of a broader DoD supply chain security initiative.