NIST SP 800-171 Compliance Assessment and Reporting

This contract involves performing a detailed evaluation of the contractor’s information systems to verify adherence to the NIST SP 800-171 Rev 1 standards for safeguarding Controlled Unclassified Information (CUI). The scope requires documenting existing security controls, identifying any deficiencies through a gap analysis, and submitting the results via the Supplier Performance Risk System (SPRS). The contract is positioned as a subcontract and is linked to NAICS code 541611, which covers administrative management and general management consulting services. Issued by the Department of Defense's ASC Supplier Operational OEM Division, the work is to be conducted primarily in Tracy, California (zip code 95304-5000). The solicitation was posted on May 12, 2026, with responses due by May 20, 2026. This contract focuses on helping ensure that the contractor’s cybersecurity measures meet federal requirements, enhancing the protection of sensitive but unclassified data within defense supply chains.