NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires performing a comprehensive self-assessment against the NIST Special Publication 800-171 Rev 1 standards to evaluate an organization’s compliance with cybersecurity requirements for protecting controlled unclassified information. This includes identifying gaps in current security controls, developing and executing corrective action plans to address deficiencies, and ensuring all implementation efforts are thoroughly documented. The deliverables must support full readiness for submission to the Department of Defense Supplier Performance Risk System, where compliance status is recorded and monitored across the defense supply chain. The work is scoped as a subcontract under the NAICS code 541611 for management, scientific, and technical consulting services, with performance taking place at Fort Hood, Texas, 76544. The assessment must be completed and documented prior to the response deadline of May 26, 2026, following the posting date of May 13, 2026. While no specific set-aside type is indicated, the effort directly supports the Department of Defense’s requirement for secure and compliant supplier practices, making timely and accurate reporting essential to maintaining eligibility for future defense contracts.