NIST SP 800-171 Compliance Assessment & SPRS Reporting

This contract involves conducting a thorough assessment of information systems to ensure they meet the NIST SP 800-171 requirements, which focus on safeguarding controlled unclassified information in non-federal systems. The contractor is responsible for evaluating compliance, documenting the results, and submitting these findings to the Department of Defense's Supplier Performance Risk System (SPRS). Additionally, the contractor must develop a Plan of Action and Milestones (POA&M) outlining steps and timelines to achieve full compliance with the NIST standards. The contract is a subcontract opportunity with the Department of Defense's Subsistence FSE Supply Chain office, posted on May 10, 2026, with a response deadline of May 14, 2026. The efforts will be performed at a facility designated as FPO with ZIP code 09564. The relevant NAICS code for this work is 541611, which pertains to administrative management and general management consulting services. This engagement is critical for ensuring that DoD contractors maintain required cybersecurity standards, contributing to overall national defense information security.