NIST SP 800-171 Cybersecurity Assessment Services

This contract involves providing cybersecurity assessment services specifically targeting System Security Plans (SSPs) for systems that manage Controlled Unclassified Information (CUI). The assessments must align with the standards outlined in NIST SP 800-171 Revision 1, ensuring compliance with established cybersecurity requirements. Upon completion of these evaluations, the findings are to be submitted to the Supplier Performance Risk System (SPRS), supporting the Department of Defense’s oversight and risk management efforts. The contract, titled "NIST SP 800-171 Cybersecurity Assessment Services," is a subcontract opportunity issued by the ASC Supplier Operations OEM Division of the Department of Defense. The work location is specified as Tracy, with a postal code of 95304-5000. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. This engagement falls under NAICS code 541611, which denotes administrative management and general management consulting services. The contract does not indicate any set-aside requirements or specific organization types for bidders.