Cybersecurity Compliance (NIST SP 800-171) for Suppliers

The contract requires implementation and assessment of NIST SP 800-171 controls to safeguard Controlled Unclassified Information within the supplier’s systems, ensuring full compliance with federal cybersecurity standards. The contractor must evaluate current security practices against the NIST framework, document control alignment, and remediate any gaps to achieve full compliance. A critical deliverable is the submission of a System Security Plan and an accurate SPRS score reflecting the organization’s compliance status, which must be verified and submitted through the required federal portal before the response deadline. This subcontract, issued by the Department of Defense under the ASC SUPPLIER OPER OEM DIVISION, targets suppliers operating at Robins Air Force Base with a ZIP code of 31098-1887 and is classified under NAICS code 541512 for computer systems design services. The solicitation is open until May 21, 2026, with responses due by 5:00 PM Eastern Time. Participation is limited to entities capable of meeting stringent cybersecurity requirements for handling CUI, and adherence to all NIST controls is mandatory for contract performance. The contractor must maintain compliance throughout the lifecycle of the engagement and be prepared for ongoing assessment or audit.