NIST SP 800-171 Compliance Assessment and SPRS Reporting

This contract involves performing a NIST SP 800-171 Revision 1 compliance assessment, which may be conducted as either a self-assessment or a third-party evaluation. The scope includes developing a comprehensive System Security Plan (SSP) and a Plan of Action and Milestones (POAM) to address identified gaps and remediation measures. The final results, including the assessment findings and documentation, are to be submitted to the Department of Defense's Supplier Performance Risk System (SPRS). The work is issued as a subcontract by the Department of Defense under the ASC SUPPLIER OPER OEM DIVISION, with the place of performance located at Tinker Air Force Base, ZIP code 73145-8000. The contract requires adherence to the NAICS code 541611, related to administrative management and general management consulting services. The solicitation was posted on May 20, 2026, with a response deadline of May 26, 2026. The contract emphasizes thorough gap analysis and remediation planning to ensure compliance with DoD cybersecurity requirements.