NIST SP 800-171 Compliance Assessment and Reporting

The contract requires conducting a self-assessment of information systems to evaluate compliance with the NIST SP 800-171 Rev. 1 security requirements. This involves thoroughly documenting the assessment findings, identifying any gaps or deficiencies, and implementing necessary corrective actions to address those issues. Following the completion of corrective measures, the contractor must submit the updated assessment scores to the Department of Defense through the Supplier Performance Risk System (SPRS). This subcontract opportunity, posted by the ASC Supplier Operations OEM Division within the Department of Defense, is classified under NAICS code 541611, which covers administrative management and general management consulting services. The work is set to be performed in Tracy, California (zip code 95304-5000), with a response deadline of May 20, 2026. The contract emphasizes ensuring compliance with federal cybersecurity standards to enhance the protection of controlled unclassified information within defense contractor information systems.