NIST SP 800-171 Cybersecurity Compliance Assessment

The contract requires a comprehensive cybersecurity assessment of the manufacturer’s information systems to verify compliance with NIST SP 800-171 Rev 1 standards for the protection of Controlled Unclassified Information. The assessment must evaluate the implementation of required security controls, identify any deficiencies or gaps in current practices, and ensure that the manufacturer’s systems adequately safeguard CUI as mandated by federal guidelines. All findings must be documented in a formal report and submitted to the Supplier Performance Risk System for official record and evaluation. The work is structured as a subcontract under the Department of Defense’s Active Devices Division, with the place of performance located in Tracy, California, 95304-5000. The North American Industry Classification System code 541611 indicates the scope involves scientific and technical consulting services, specifically in the cybersecurity domain. The solicitation was posted on May 8, 2026, with a response deadline of May 13, 2026, leaving a short window for interested parties to propose their capabilities. There is no set-aside designation, meaning any qualified entity may bid, and the contract is intended to be executed as a subcontract to fulfill a broader Defense Department requirement.