NIST SP 800-171 Compliance Assessment and SPRS Reporting

The contract requires the execution of a NIST SP 800-171 compliance assessment for a defense contractor’s IT systems, with the assessment level designated as Basic, Medium, or High based on the sensitivity of the controlled unclassified information handled. The task includes a thorough evaluation of all 110 security controls outlined in the framework to determine adherence and identify gaps, followed by comprehensive documentation of findings. The results must be submitted to the Supplier Performance Risk System to update the contractor’s federal compliance posture. The work must support government validation efforts, which may involve providing additional evidence, clarifying responses, or participating in reviews to confirm accuracy and completeness of the assessment. The performance location is specified as Port Hueneme, California, with a deadline for submission set for May 19, 2026. This subcontract falls under NAICS code 541611 for management consulting services and is procured by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV.