NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires the performance of an internal cybersecurity assessment aligned with NIST Special Publication 800-171 Rev 1 to evaluate compliance with federal security requirements for handling controlled unclassified information. The assessment must be conducted thoroughly across all relevant systems, policies, and procedures to ensure alignment with the technical and operational controls specified in the NIST standard. Upon completion, the results must be formally documented and submitted to the Department of Defense’s Supplier Performance Risk System, where the findings will be used to assess the vendor’s cyber readiness and risk posture within the defense supply chain. This subcontract is issued under NAICS code 541611, indicating it falls under management consulting services, and is administered by the ASC Supplier Oper OEM Division under the Department of Defense. The solicitation was posted on April 29, 2026, with a strict response deadline of May 7, 2026, leaving no flexibility for late submissions. All work must be completed and reported within the specified timeframe, and submission to SPRS is mandatory for contractual compliance. The performance location is not specified, suggesting the assessment may be conducted remotely or at the contractor’s facility, but any system containing controlled unclassified information must be fully evaluated regardless of location. Failure to meet the requirements could impact eligibility for future DoD contracting opportunities.