NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract involves performing a medium or high-level assessment of information systems to ensure compliance with the NIST SP 800-171 Rev 1 standards. The scope includes evaluating the systems' security architectures and controls, documenting findings, and preparing necessary documentation such as system security plans and summary scores. These deliverables are to be submitted to the Department of Defense's Supplier Performance Risk System (SPRS) to maintain or improve security posture as required by DoD regulations. This subcontract opportunity, posted on May 13, 2026, with a response deadline of May 21, 2026, is managed by the ASC Commodities Division of the Department of Defense. The work is to be performed in New Cumberland, with NAICS code 541611 indicating management and technical consulting services. The contract does not specify any set-aside types or other restrictions, and it requires adherence to strict deadlines and compliance protocols to fulfill DoD supplier cybersecurity requirements.