NIST SP 800-171 Cybersecurity Compliance Support

The contract seeks consulting services to ensure compliance with NIST SP 800-171 Rev 1 requirements for protecting controlled unclassified information in nonfederal systems. The scope includes comprehensive support to develop a System Security Plan, conduct a thorough self-assessment of security controls, and achieve an accurate SPRS score representing the organization’s compliance posture. The work is focused on meeting federal cybersecurity standards required for handling sensitive government information and must be executed with precision to satisfy assessment criteria. This subcontract is issued under the NAICS code 541611 for management consulting services and is associated with the Department of Defense, specifically the ASC SUPPLIER OPER AE AND AF DIV. Performance of the work is required to take place in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026. While no specific set-aside provisions are indicated, the contract is structured as a subcontract within the broader DOD procurement framework, and all deliverables must align strictly with NIST guidelines to ensure successful compliance certification.