NIST SP 800-171 Compliance Assessment and SPRS Reporting

This contract involves the development and maintenance of a System Security Plan (SSP) specifically addressing Controlled Unclassified Information (CUI) in accordance with NIST SP 800-171 standards. The contractor is required to perform a thorough assessment to evaluate compliance against NIST SP 800-171 controls, ultimately achieving a full compliance score. Following the assessment, the contractor must submit the results to the Supplier Performance Risk System (SPRS), ensuring that security requirements are met and documented properly. The contract is issued as a subcontract under the Department of Defense, specifically the Nuclear Reactor Program, with the place of performance at Robins Air Force Base, zip code 31098-1887. The solicitation was posted on May 15, 2026, with a response deadline of May 20, 2026. It falls under the NAICS code 541611, covering administrative management and general management consulting services. This effort is critical to maintaining the cybersecurity posture related to handling sensitive but unclassified government information, supporting compliance and reporting obligations for defense-related activities.