NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires a comprehensive assessment of NIST SP 800-171 Rev 1 compliance across all 110 security controls within the designated organization’s environment. The assessment must evaluate current practices, identify gaps in implementation, and provide a structured plan to achieve full compliance. This includes documenting the current status of each control, recommending remediation actions, and establishing clear, measurable targets for bringing the system into alignment with NIST requirements. The work must culminate in the preparation and submission of a System Security Plan Report (SPSR) to the Supplier Performance Risk System, ensuring all findings and corrective actions are accurately reported to meet Department of Defense standards. The performance is to be conducted in support of the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense, with the place of performance located at Robins AFB, Georgia, 31098-1887. The contract is classified as a subcontract and falls under NAICS code 541611 for management consulting services. Responses to this solicitation were due by August 7, 2026, with the posting date on August 4, 2026. The deliverables are tied directly to regulatory compliance and federal contracting readiness, emphasizing timely documentation, accuracy in reporting, and adherence to the specific framework outlined in NIST SP 800-171 Rev 1 to support continued eligibility for defense-related work.