NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires a comprehensive evaluation of the prime contractor’s information systems to ensure full alignment with the National Institute of Standards and Technology Special Publication 800-171 requirements, which govern the protection of controlled unclassified information in nonfederal systems. This assessment involves identifying gaps in current security controls, developing all necessary documentation to demonstrate compliance, and implementing remediation measures where deficiencies are found. The deliverables must be thorough and include detailed records of the assessment process, findings, and corrective actions taken to meet each of the 14 families of security controls outlined in NIST SP 800-171. All results from the assessment and supporting documentation must be submitted to the Supplier Performance Risk System, ensuring transparency and accountability for the prime contractor’s cybersecurity posture. The work is to be performed at the designated place of performance in New Cumberland, Pennsylvania, with a tight turnaround requiring submission by the response deadline of May 4, 2026. The contract falls under the NAICS code 541611 for management consulting services and is issued as a subcontract through the Department of Defense’s Army Combat Capabilities Development Command, with the solicitation posted on the DIBBS platform.