Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires the implementation and assessment of NIST SP 800-171 security controls to ensure the protection of covered defense information, with a focus on achieving full compliance across all applicable requirements. This includes executing necessary technical and administrative safeguards, documenting control implementation, and maintaining ongoing readiness for assessment. The contractor must also support annual Department of Defense assessments and submit accurate Supplier Performance Risk System (SPRS) reporting to demonstrate compliance status, ensuring transparency and alignment with DOD cybersecurity expectations. Performance is required at Robins Air Force Base, Georgia with a delivery date of March 31 2027. The contract is structured as a subcontract and falls under NAICS code 541512 for computer systems design services. Respondents must submit proposals by August 13 2026 to meet the deadline set by the Department of Defense’s ASC Supplier Operations AE and AF Division. Full compliance with NIST controls, accurate SPRS updates, and successful annual assessment outcomes are critical to contract fulfillment and continued eligibility for defense-related work.