NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires the performance of cybersecurity assessments on systems handling Controlled Unclassified Information in accordance with NIST SP 800-171 and the Department of Defense Assessment Methodology. Deliverables include compliant System Security Plans, detailed compliance scoring, and reports that meet the Supplier Performance Risk System requirements. The work must ensure systems meet federal standards for protecting CUI and are accurately documented to support DoD compliance verification. This is a subcontract opportunity issued by the Strategic Acquisition Program Directorate under the Department of Defense, with a solicitation posted on May 8, 2026, and responses due by May 13, 2026. The NAICS code is 541611, indicating services related to management, scientific, and technical consulting. The place of performance and point of contact details are not specified, and the opportunity is not designated for any specific set-aside classification. Applicants must be prepared to meet stringent security and documentation requirements aligned with DoD’s cybersecurity framework.