NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires the performance of a NIST SP 800-171 compliance assessment on the prime contractor’s information systems that process, store, or transmit Controlled Unclassified Information. The assessment must evaluate the implementation of all 110 security requirements outlined in NIST SP 800-171, identify any gaps or nonconformities, and produce a detailed documentation of findings. The results must be summarized and officially posted to the Supplier Performance Risk System to ensure transparency and compliance with Department of Defense cybersecurity standards. The work is scoped as a subcontract under the NAICS code 541611, indicating it involves management consulting services related to administrative and general management consulting. The place of performance is listed as FPO with zip code 09583-0200, indicating operations may be conducted in a military postal location. Responses are due by May 4, 2026, with the solicitation posted on April 30, 2026, under the Agency name SUBSISTENCE FSE SUPPLY CHAIN within the Department of Defense.