NIST SP 800-171 Compliance Assessment & Reporting

The contract requires a comprehensive assessment of an information system’s adherence to the security controls outlined in NIST Special Publication 800-171 Revision 1, with the goal of determining compliance status through thorough evaluation and documentation of all findings. The assessment must cover all applicable controls, identify gaps or deficiencies, calculate a quantitative compliance score, and produce a finalized report that accurately reflects the system’s security posture. All results must be submitted through the Department of Defense Supplier Performance Risk System (SPRS) to ensure official record and tracking of compliance. The work is structured as a subcontract under the NAICS code 541611 and is tied to performance at the specified location in New Cumberland, PA, with a zip code of 17070-5002. The solicitation was posted on May 11, 2026, and responses are due by May 19, 2026. The contracting activity is managed by the ASC Supplier Oper OEM Division within the Department of Defense, and completion of this assessment is critical to validating the contractor’s adherence to federal cybersecurity requirements for handling controlled unclassified information. The deliverables must ensure full transparency, accuracy, and alignment with DoD expectations prior to reporting.