NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a comprehensive self-assessment of information systems to ensure compliance with NIST Special Publication 800-171 for the protection of Controlled Unclassified Information. The assessment must systematically evaluate existing cybersecurity controls, identify any gaps or deficiencies in alignment with the NIST framework, and document findings with sufficient detail to support remediation planning. All results must be formally reported through the Supplier Performance Risk System, ensuring transparency and traceability for federal oversight. The work is scoped as a subcontract under the Department of Defense, specifically managed by DLA Dist San Joaquin, with performance required at the Tracy, California location. The solicitation was posted on July 22, 2026, and responses are due by July 27, 2026, indicating a tight turnaround and urgent need for compliance evaluation. The NAICS code 541611 confirms this involves information technology consulting services focused on cybersecurity assessment and advisory.