NIST SP 800-171 Compliance Assessment and SPRS Reporting

The contract requires a comprehensive evaluation of cybersecurity controls aligned with NIST Special Publication 800-171 to ensure compliance with federal standards for protecting controlled unclassified information. This assessment must systematically identify deficiencies in existing security measures, document findings, and produce actionable recommendations to address all identified gaps. The ultimate objective is to achieve a score of 110 or higher when submitting the results to the Supplier Performance Risk System, which is critical for maintaining eligibility and trustworthiness as a defense contractor. The work is scoped as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, with performance based in San Antonio, Texas, ZIP 78226-1869. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. The North American Industry Classification System code 541618 indicates this effort falls under other scientific and technical consulting services, emphasizing the need for specialized cybersecurity expertise. Submission to SPRS must be accurate and timely, as it directly impacts the supplier’s risk profile and continued access to DoD contracting opportunities.