NIST SP 800-171 Compliance and SPRS Assessment Services

The contract requires the provision of NIST SP 800-171 cybersecurity assessments and System for Award Management (SPRS) submissions for subcontractors to ensure compliance with prime contractor cybersecurity obligations. These assessments must evaluate the implementation of security controls outlined in NIST SP 800-171 to safeguard controlled unclassified information within the subcontractor environment, with findings formally documented and submitted to the SPRS database to validate compliance status. The work is scoped to support Defense Logistics Agency subcontractors under the Department of Defense, adhering to the North American Industry Classification System code 541611, which pertains to administrative management and general management consulting services. Performance of the contract activities does not specify a fixed geographic location, allowing flexibility in execution across wherever the subcontractors are situated. Although the solicitation and set-aside details are not defined, the contract is explicitly classified as a subcontract engagement, indicating its role within a broader prime contract framework for defense supply chain cybersecurity.