NIST SP 800-171 Cybersecurity Compliance Assessment and Reporting

This subcontract opportunity involves conducting cybersecurity assessments and generating compliance reports for Department of Defense contract systems, ensuring alignment with the requirements specified in NIST SP 800-171 Rev 1. The work is focused on evaluating the security controls and practices of DoD-related systems to verify adherence to established cybersecurity standards intended to protect Controlled Unclassified Information (CUI). The contract falls under NAICS code 541611, which pertains to administrative management and general management consulting services. The solicitation was posted on May 15, 2026, with a response deadline set for May 20, 2026. The work is to be performed primarily in Tracy, California (zip code 95304-5000), under the oversight of the Defense Logistics Agency Distribution San Joaquin office, part of the Department of Defense. This subcontract emphasizes the importance of cybersecurity compliance within defense contracts, addressing both assessment and reporting to support the DoD's stringent security requirements.