NIST SP 800-171 Cybersecurity Compliance Assessment

The contract involves performing a cybersecurity assessment focused on ensuring compliance with NIST SP 800-171 Revision 1 standards for systems that manage Controlled Unclassified Information (CUI). The contractor is responsible for validating that these systems adhere to the required cybersecurity controls and standards. Upon completion of the assessment, the results must be submitted to the Department of Defense's Supplier Performance Risk System (SPRS) and the necessary documentation provided to the prime contractor. This subcontract opportunity, issued by the Department of Defense's ASC Supplier Operations for the Army and Air Force Division, is identified under the NAICS code 541611. The work is to be performed in Tracy, California, with a response deadline set for May 20, 2026. The contract aims to support the DoD’s efforts in maintaining stringent cybersecurity measures for protecting sensitive but unclassified defense-related information.