NIST SP 800-171 Compliance Assessment & System Security Plan Development

The contract requires the execution of cybersecurity compliance assessments for defense contractors with a focus on evaluating implementation of NIST SP 800-171 controls. The scope includes identifying gaps and deficiencies in existing security practices and developing comprehensive System Security Plans to address those shortcomings. Work must align with federal requirements for protecting controlled unclassified information within contractor systems and ensure proper documentation to support compliance validation. Reporting obligations include submission of assessment outcomes to the Supplier Performance Risk System and accurate tracking of CAGE codes to maintain visibility into contractor compliance status across the supply chain. The assessment activities will be performed primarily in Tracy, California, with a zip code of 95304-5000 as the designated place of performance. The contract falls under NAICS code 541611 for management, scientific, and technical consulting services and is classified as a subcontract within the Department of Defense structure under the ASC SUPPLIER OPER OEM DIVISION. Responses are due by May 20, 2026, with the opportunity posted on May 12, 2026, and no set-aside provisions or organizational type restrictions have been specified. All work must be conducted to meet DOD cybersecurity standards with accuracy and timeliness to ensure contractor readiness and supply chain integrity.