NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires a comprehensive self-assessment of information systems against the NIST SP 800-171 security controls to evaluate compliance with federal cybersecurity standards for protecting controlled unclassified information. The assessment must identify specific gaps in current controls, document the extent of noncompliance, and propose remediation strategies where applicable. The results of this evaluation must be formally submitted to the Department of Defense Supplier Performance Risk System to ensure transparency and accountability within the defense supply chain. The work is designated as a subcontract under NAICS code 541611 with performance required at Lackland AFB, Texas, and responses are due by May 19, 2026, following a solicitation posted on May 12, 2026. The effort supports the broader DoD objective of enforcing baseline cybersecurity posture across its contractors and suppliers.