NIST SP 800-171 Compliance Assessment (IT Security)

The contract requires a comprehensive assessment to ensure compliance with NIST Special Publication 800-171 for the protection of controlled unclassified information (CUI) within contractor systems, as mandated by the DFARS clause 252.240-7997. This subcontract is focused on IT security measures necessary to safeguard CUI, with performance expected to be carried out at Tracy, California, zip code 95304-5000. The solicitation, issued under NAICS code 541618 for other scientific and technical consulting services, is open for responses until August 3, 2026, and was posted on July 23, 2026, with the agency responsible being the Fluid Handling Division within the Department of Defense. The assessment must evaluate existing security controls, identify gaps against NIST 800-171 requirements, and validate implementation of appropriate safeguards to meet federal standards for protecting sensitive but unclassified information. The contractor is expected to deliver a documented evaluation demonstrating full alignment with the specified cybersecurity framework and readiness for oversight or audit. This engagement does not specify a set-aside type, indicating it is open to all eligible entities, and the primary objective is ensuring secure handling of CUI in support of defense-related operations.