NIST SP 800-171 Compliance Assessment and SPRS Reporting

The contract entails performing a comprehensive evaluation of an organization's cybersecurity controls in accordance with the NIST SP 800-171 standards. The primary objective is to identify any security gaps that may exist and to compile these findings into a report for submission to the Supplier Performance Risk System (SPRS). The contract specifies a target SPRS score of 110 or higher, indicating a stringent compliance requirement. This subcontract is associated with the Department of Defense under the ASC SUPPLIER OPER OEM DIVISION and relates to NAICS code 541618, which covers professional services in management consulting. The assessment and reporting must be completed within a tight timeframe, with the solicitation posted on May 10, 2026, and responses due by May 18, 2026. The place of performance is designated as San Antonio, with the ZIP code 78226-1869. While specific organizational contact details are not provided, the contract is accessible via the designated government procurement link, highlighting the formal procurement process involved. This engagement is critical for ensuring suppliers meet federal cybersecurity requirements that safeguard controlled unclassified information used in defense contracting.