NIST SP 800-171 Compliance Assessment & Reporting

The contract requires the execution of NIST SP 800-171 Rev 1 compliance assessments for contractor systems supporting the Department of Defense, focusing on evaluating the effectiveness of cybersecurity controls aligned with the standard’s requirements. The scope includes documenting system architecture, identifying gaps in control implementation, and ensuring all findings are thoroughly recorded to support compliance validation. The assessed systems must be reviewed against the specific security measures outlined in NIST SP 800-171 Rev 1, with particular attention to protected federal information and the operational environment in which it resides. All assessment results must be formally submitted to the DoD Supplier Performance Risk System (SPRS) as mandatory reporting for contractor accountability. The place of performance is specified as New Cumberland, PA with a zip code of 17070-5002, and the work falls under NAICS code 541611 for management, scientific, and technical consulting services. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026, indicating a tight turnaround for proposal submission. This is classified as a subcontract, meaning the award recipient will be working under a prime contractor or larger contractual arrangement within the defense supply chain.