NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires performing a thorough self-assessment of information systems to evaluate compliance with NIST SP 800-171 security controls, focusing on identifying any gaps or deficiencies relative to these standards. The findings from this assessment are to be compiled and submitted to the Department of Defense’s Supplier Performance Risk System (SPRS), ensuring proper documentation of compliance status. This subcontract engagement is posted by the Department of Defense under the Medical Supply Chain FSH and is designated for performance at Lackland Air Force Base, Texas, with a solicitation posted on May 12, 2026, and responses due by May 19, 2026. The scope is aligned with NAICS code 541611, indicating management consulting services that support organizational compliance and risk management efforts. The contractor will play a crucial role in assisting the DoD in maintaining cybersecurity standards for sensitive information by validating adherence to federal requirements and providing transparency through SPRS reporting. There is no set-aside status indicated, and the opportunity is accessible through the government procurement portal, facilitating effective subcontracting for specialized compliance assessment services.