NIST SP 800-171 Compliance Assessment and Scoring

The contract involves performing a thorough evaluation of a contractor’s information systems to determine compliance with the NIST SP 800-171 security standards. This includes assessing the implementation of security controls, calculating an overall compliance score, and preparing all necessary documentation for submission to the Supplier Performance Risk System (SPRS). The work is designated as a subcontract and falls under the NAICS code 541611, which pertains to administrative management and general management consulting services. Issued by the Department of Defense’s Subsistence FSE Supply Chain office, the contract requires the assessment to be conducted at the place of performance in Quantico, Virginia, with a zip code of 22134-5061. The solicitation was posted on May 11, 2026, and proposals must be submitted by May 15, 2026. While no specific set-aside or organization type requirements are indicated, the contract’s focus is critical for ensuring supply chain participants meet stringent cybersecurity mandates essential to national security.