NIST SP 800-171 Compliance Assessment & Reporting

This contract requires conducting a thorough assessment of an information system to ensure compliance with the security controls outlined in NIST SP 800-171 Rev 1. The work includes documenting the assessment findings, calculating an overall compliance score, and submitting the results to the Department of Defense’s Supplier Performance Risk System (SPRS). The contract is a subcontract opportunity posted on May 11, 2026, with responses due by May 19, 2026. It falls under NAICS code 541611, which pertains to administrative management and general management consulting services. The contract is issued by the ASC Supplier Operational OEM Division within the Department of Defense and the work will be performed in New Cumberland, ZIP code 17070-5002. Key objectives focus on ensuring the evaluated information system meets the stringent security requirements necessary for protecting controlled unclassified information. This effort supports DoD’s commitment to maintaining cybersecurity standards and improving supplier risk management by verifying compliance scores accurately reflect security control adherence.