NIST SP 800-171 Cybersecurity Compliance Assessment

A NIST SP 800-171 cybersecurity compliance assessment is required for a defense contractor to ensure adherence to federal standards protecting controlled unclassified information. The scope includes developing a comprehensive System Security Plan that documents security controls and implementation strategies aligned with NIST guidelines, while also meeting the mandatory requirements of DFARS 252.204-7012 and 252.204-7020 which govern the safeguarding of covered defense information and cyber incident reporting. All assessment findings and documentation must be submitted to the Supplier Performance Risk System to validate compliance. The work is to be performed at a designated location in Tracy, California, with a strict deadline for submission by May 20, 2026, and the contract is structured as a subcontract under the NAICS code 541611 for management and technical consulting services.