NIST SP 800-171 Cybersecurity Compliance Assessment

A cybersecurity assessment is required for systems handling Controlled Unclassified Information (CUI) aligned with the requirements of NIST SP 800-171 Rev 1, including a thorough gap analysis to identify compliance shortcomings and a Strategic Planning and Reporting System (SPRS) submission targeting a score of 110. The work is scoped as a subcontract under the Department of Defense, specifically managed by DLA Dist San Joaquin, with performance to be conducted at Tracy, California, ZIP 95304-5000. The solicitation, identified by the procurement code SPE8E626T2660, falls under NAICS code 541611 for computer systems design services and requires proposals to be submitted by July 14, 2026, with the request posted on July 9, 2026. The assessment must comprehensively evaluate technical and administrative controls to ensure full alignment with NIST standards, with the SPRS score serving as the critical metric for successful compliance validation.