NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires the execution of a medium to high-level assessment of information systems to ensure compliance with NIST SP 800-171 Rev 1 standards, focusing on the protection of controlled unclassified information. The provider must evaluate the system’s security controls, develop or update system security plans and architectures, and document the implementation status of all 110 required controls. The deliverables include comprehensive documentation ready for submission to the Department of Defense’s Supplier Performance Risk System, including detailed control assessments and a final summary score that reflects the organization’s compliance posture. The assessment must be performed in alignment with DoD expectations and submitted through the designated SPRS portal to support supply chain risk management. The performance location is specified as New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the work is structured as a subcontract under NAICS code 541611. The solicitation was posted on May 13, 2026, with a firm response deadline of May 21, 2026, and is managed by the ASC Commodities Division under the Department of Defense, indicating the scope is tied to defense contracting obligations and requires strict adherence to federal cybersecurity requirements.