NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires a thorough evaluation of information systems to ensure alignment with the National Institute of Standards and Technology Special Publication 800-171 standards for protecting controlled unclassified information. This assessment must meticulously examine controls across administrative, technical, and physical domains, document all findings including gaps and non-compliances, and formally submit results to the Department of Defense Supplier Performance Risk System. A detailed Plan of Action and Milestones must be developed to outline corrective actions, assign responsibilities, establish realistic timelines, and track progress toward achieving full compliance. The work is structured as a subcontract under the NAICS code 541611, with performance location tied to FPO 09564 and a tight response window closing on May 14, 2026. The effort is part of a broader Department of Defense initiative managed by the Subsistence FSE Supply Chain organization to enforce cybersecurity hygiene across the supply base.