NIST SP 800-171 Cybersecurity Compliance Assessment

The contract involves performing a thorough evaluation of information systems to verify adherence to NIST SP 800-171 Revision 1 standards, which focus on safeguarding Controlled Unclassified Information (CUI). Key tasks include conducting a gap analysis to identify areas of non-compliance, developing a System Security Plan (SSP) to outline security controls, and completing reporting requirements for the Supplier Performance Risk System (SPRS). This subcontract opportunity is issued by the Department of Defense’s ASC Supplier Operating OEM Division, with the primary work location in San Diego, California. Responses to the solicitation must be submitted by May 20, 2026, following its posting on May 12, 2026. The contract falls under NAICS code 541611, indicating consulting services. The objective is to enhance cybersecurity compliance within information systems handling sensitive but unclassified government data, supporting defense sector operational security mandates. The solicitation link provides access to the full request details for interested subcontractors.