NIST SP 800-171 Compliance Assessment & Reporting

The contract involves performing formal assessments aligned with NIST SP 800-171 standards to evaluate compliance based on the sensitivity of the system, categorized as Basic, Medium, or High. The key tasks include conducting thorough assessments, documenting findings in detail, and submitting the results to the Supplier Performance Risk System (SPRS), which encompasses summary scores and the methodology used for the evaluation. The work is to be performed as a subcontract under the Department of Defense's Active Devices Division, with the place of performance located in New Cumberland, zip code 17070-5002. The solicitation for this contract was posted on May 15, 2026, with a response deadline shortly after on May 20, 2026, emphasizing a tight submission window. The applicable NAICS code for this work is 541611, which pertains to administrative management and general management consulting services. This indicates a focus on providing expert assessment and reporting services to ensure systems meet the required security standards. No specific organizational type or set-aside requirements have been indicated for this subcontract opportunity.