NIST SP 800-171 Compliance Assessment & SPRS Reporting

This contract involves conducting a thorough assessment of an information system’s adherence to the requirements set forth in NIST SP 800-171 Revision 1. The key objective is to identify any control weaknesses or deficiencies within the system's security framework. Following the assessment, the contractor is required to report the findings to the Department of Defense's Supplier Performance Risk System (SPRS). Critical deliverables include detailed documentation of the current security architecture and a strategic roadmap outlining the steps necessary for achieving full compliance. The contract is identified as a subcontract opportunity posted by the Aviation Supply Chain office within the Department of Defense, with the work to be performed at Tinker Air Force Base. Responses to the solicitation must be submitted by May 20, 2026. The contract falls under NAICS code 541690, which pertains to other scientific and technical consulting services. This opportunity emphasizes the importance of cybersecurity compliance in defense-related supply chains and seeks to ensure that information systems meet federal security standards.