NIST SP 800-171 Cybersecurity Assessment and SPRS Reporting

This contract involves conducting medium or high-level cybersecurity assessments for systems that manage Controlled Unclassified Information (CUI). The primary objective is to evaluate and ensure compliance with the NIST SP 800-171 standards, which outline the necessary security requirements to protect sensitive information in non-federal systems. Successful completion of the assessment will require a thorough examination of the organization's cybersecurity posture and controls as they relate to safeguarding CUI. The contract is a subcontract under the Department of Defense, specifically through the ASC Supplier Operations OEM Division, with the work to be performed in Tracy, zip code 95304-5000. The solicitation was posted on May 12, 2026, with a response deadline of May 20, 2026. Upon completion of the cybersecurity assessment, the results must be reported to the Supplier Performance Risk System (SPRS), facilitating transparency and ongoing compliance tracking. The NAICS code for this work is 541611, indicating business and management consulting services.