NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a thorough evaluation of information systems to validate compliance with NIST SP 800-171 Rev 1 standards for safeguarding Controlled Unclassified Information. This includes performing a detailed gap analysis to identify deficiencies in current security controls, developing a comprehensive System Security Plan that documents policies, procedures, and technical safeguards aligned with NIST requirements, and submitting accurate scoring and reporting through the Supplier Performance Risk System. The work is scoped to ensure all CUI handling processes meet federal cybersecurity mandates and are properly documented and implemented within the contractor’s environment. The contract is classified as a subcontract under the NAICS code 541611 and is issued by the Department of Defense through the ASC SUPPLIER OPER OEM DIVISION. Performance is required at a location in San Diego, California, with a zip code of 92136-3581. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. All deliverables must be completed in alignment with the specified NIST framework and submitted via the designated federal systems to satisfy contractual compliance obligations.