NIST SP 800-171 Compliance Assessment and Reporting

The contract requires the performance of self-assessments or third-party evaluations of information systems to verify adherence to the National Institute of Standards and Technology Special Publication 800-171 Revision 1 standards, which outline security requirements for protecting controlled unclassified information in nonfederal systems. The evaluations must include the development and submission of system security plans and detailed implementation timelines that demonstrate how required controls are being or will be integrated into the organization’s environment. All assessment results, along with supporting documentation, must be submitted to the Supplier Performance Risk System to ensure transparency and accountability in the defense supply chain. This subcontract, issued by the Department of Defense's ASC Supplier Operations OEM Division, is tied to a performance location at Tinker Air Force Base with a ZIP code of 73145-8000. It falls under the NAICS code 541611, indicating it involves management, scientific, and technical consulting services, specifically related to information technology and cybersecurity compliance. The solicitation was posted on May 12, 2026, with a response deadline of May 20, 2026, and is part of a broader effort by the Department of Defense to enforce cybersecurity readiness among its suppliers. Compliance with these requirements is mandatory for continued eligibility to work on defense-related projects.