NIST SP 800-171 Compliance Implementation and Assessment

The contract requires the implementation, documentation, and assessment of cybersecurity controls aligned with NIST Special Publication 800-171 to safeguard Controlled Unclassified Information. The effort encompasses developing a comprehensive System Security Plan, conducting a thorough self-assessment of compliance posture, and submitting the resulting evaluation through the Supplier Performance Risk System. All activities must be executed to ensure full adherence to federal requirements for protecting CUI within the contractor’s systems and environments. This subcontract, issued by the ASC Commodities Division under the Department of Defense, is targeted for performance in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. It falls under the NAICS code 541611, which corresponds to Management, Scientific, and Technical Consulting Services. The contract does not specify a set-aside status and is not open to the general public, with details accessible through the DIBBS platform. Success requires precise alignment with NIST 800-171 requirements and documented evidence of control implementation across the entire scope.