NIST SP 800-171 Compliance Assessment and SPRS Reporting

The contract requires a comprehensive evaluation of the contractor’s information systems to ensure full compliance with NIST Special Publication 800-171 Revision 1, which outlines security requirements for protecting controlled unclassified information in nonfederal systems. The assessment must systematically identify any gaps or deficiencies in current security controls and document them thoroughly. All findings must be submitted to the Department of Defense Supplier Performance Risk System (SPRS) database, along with a detailed Plan of Action and Milestones that outlines corrective steps, assigned responsibilities, and realistic timelines for resolving each identified deficiency. The work is scoped as a subcontract under the NAICS code 541611, associated with the Medical Supply Chain FSH organization within the Department of Defense, and performance is required at Camp Pendleton, California, with a postal code of 92055-5627. The solicitation was posted on May 10, 2026, with a response deadline of May 18, 2026, indicating a narrow window for proposal submission. The objective is to support DoD’s mandate for cybersecurity readiness among its supply chain partners by ensuring consistent, verifiable adherence to federal security standards through formal documentation and reporting.