NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract involves performing a comprehensive assessment of a contractor's information system to ensure compliance with NIST SP 800-171 security requirements. This includes thoroughly documenting the findings and preparing a System Security Plan (SSP) that details how security controls are implemented. The results of the assessment, along with the score, must be submitted to the Department of Defense's Supplier Performance Risk System (SPRS), facilitating transparency and oversight of cybersecurity posture. Issued by the Department of Defense's ASC Commodities Division, the subcontract focuses on meeting stringent security standards applicable to government contractors. The work is to be carried out in Jacksonville, with a response deadline set within a few days of the posting date in May 2026. The contract falls under NAICS code 541611, which relates to administrative management and general management consulting services. This engagement is critical for contractors supporting DoD operations who must demonstrate adherence to federal cybersecurity directives.