NIST SP 800-171 Cybersecurity Assessment & SPRS Reporting Support

The contract requires the performance of a Basic NIST SP 800-171 cybersecurity assessment to evaluate compliance with federal security requirements for protecting controlled unclassified information. This includes developing a comprehensive System Security Plan that documents security controls, responsibilities, and implementation strategies aligned with NIST guidelines. The results of the assessment and the finalized SSP must be submitted to the Supplier Performance Risk System to fulfill obligations under DFARS 252.204-7012. The scope also encompasses annual reassessments to ensure ongoing compliance and provides audit support to prepare for and respond to any official reviews or inspections. The work is structured as a subcontract under the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION with a place of performance in Tracy, California, 95304-5000. The NAICS code 541611 indicates the nature of the work involves management consulting services, specifically related to cybersecurity compliance. The solicitation was posted on May 12, 2026, with responses due by May 20, 2026, and the effort is expected to be ongoing through routine annual evaluations and continuous audit readiness support.