NIST SP 800-171 Compliance Assessment and SPRS Reporting

The contract requires a comprehensive evaluation of information systems to ensure full adherence to NIST SP 800-171 Rev 1 standards, including a detailed analysis of security controls and practices across all relevant technology environments. A formal System Security Plan must be developed to document the organization’s approach to protecting controlled unclassified information, alongside a thorough documentation of the system architecture that outlines data flows, components, and interconnections. All findings from the assessment must be compiled and officially reported to the Supplier Performance Risk System, ensuring transparency and accountability to federal stakeholders. The work must be completed and submitted by the specified deadline, with a strict requirement to respond to any government rebuttals or requests for clarification within 14 business days of receipt, underscoring the urgency and precision expected in communication and compliance. The performance location is Jacksonville, Florida, and the work falls under the NAICS code 541611 for management consulting services, conducted as a subcontract for the Department of Defense’s Medical Supply Chain FSH.