NIST SP 800-171 Compliance Assessment and SPRS Reporting

The contract requires performing a comprehensive compliance assessment aligned with NIST SP 800-171 Revision 1 standards for contractor systems that manage Controlled Unclassified Information (CUI). The contractor must evaluate the current state of compliance, thoroughly document findings, and compute a summary score that reflects adherence to required security controls. These results are then to be submitted to the Supplier Performance Risk System (SPRS) to ensure transparency and accountability. If any deficiencies or gaps are identified during the assessment, the contractor is responsible for developing and providing corrective action plans to address and remediate those security shortcomings. This subcontract, issued by the Department of Defense through the ASC Commodities Division, is classified under NAICS code 541611, which pertains to administrative and management consulting services. The solicitation was posted on May 15, 2026, with a response deadline set for May 20, 2026. The contract details do not specify a type of set-aside or specific place of performance, and no specific office address or point of contact information is provided. The overall goal of this contract is to ensure that contractor systems handling sensitive but unclassified information meet federal cybersecurity requirements and maintain robust protections against unauthorized access or data breaches.