NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contractor is required to perform a comprehensive NIST SP 800-171 assessment of their information systems to evaluate compliance with federal security controls designed to protect controlled unclassified information. This includes documenting the implementation status of all 110 controls outlined in the framework, identifying any gaps or deficiencies, and submitting detailed compliance scores along with formal corrective action plans through the Supplier Performance Risk System, or SPRS, to the Department of Defense. The assessment must be conducted rigorously to ensure alignment with DoD requirements, and all findings must be accurately reported via the designated portal within the specified timeframe. The contract is classified as a subcontract under NAICS code 541611 and is issued by the Subsistence FSE Supply Chain division of the Department of Defense. The place of performance is listed as APO with ZIP code 96694, indicating an overseas or military postal location. The solicitation was posted on May 7, 2026, with a strict deadline for responses on May 11, 2026, leaving a narrow window for submission. The contractor must ensure all deliverables are completed and submitted accurately and on time to avoid noncompliance penalties and to maintain eligibility for future DoD engagements.