NIST SP 800-171 Compliance Assessment and SPRS Reporting

The contract requires a thorough evaluation of covered information systems to ensure alignment with NIST Special Publication 800-171 Revision 1 standards, focusing on the protection of controlled unclassified information. The effort involves identifying gaps in security controls, implementing necessary remediations, and generating comprehensive documentation such as system security plans and assessment summaries that demonstrate compliance. All deliverables must be accurately prepared and submitted to the Department of Defense’s Supplier Performance Risk System database to meet federal contracting requirements. The work is scoped as a subcontract under the NAICS code 541611 and is tied to a performance location in Asheville, North Carolina, with a specific deadline for responses set for May 18, 2026. The contracting activity originates from the Department of Defense, under the Medical Supply Chain FSH office, indicating the context involves defense-related information systems handling sensitive data. While details like point of contact or set-aside status are not provided, compliance with NIST 800-171 and timely submission to SPRS are critical obligations for any entity seeking to fulfill this requirement.