Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires the performance and submission of a NIST SP 800-171 DoD Assessment through the Supplier Performance Risk System to verify compliance with safeguarding controlled unclassified information. This assessment is mandatory to ensure that the contractor meets the cybersecurity standards outlined in NIST Special Publication 800-171, which are designed to protect sensitive data within the Department of Defense supply chain. The work must be completed and submitted by the deadline of August 10, 2026, under a subcontract arrangement tied to the NAICS code 541611, indicating the scope involves management consulting services related to cybersecurity compliance. The performance of this contract is specifically tied to Fort Bragg, North Carolina, with the Medical Supply Chain Pharm FSA, a component of the Department of Defense, acting as the overseeing agency. The requirement is not for general consulting but for a precise technical submission that validates the contractor’s implementation of required security controls. Failure to complete and properly submit the assessment in SPRS could result in ineligibility for future work or contract termination. Contractors must ensure their systems, procedures, and documentation align with NIST 800-171 requirements prior to submission, as the DoD uses SPRS data to evaluate supplier risk and readiness for handling controlled unclassified information.