NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires a detailed evaluation of an information system’s adherence to NIST SP 800-171 Rev 1 standards, focusing on identifying gaps and weaknesses in security controls related to the protection of controlled unclassified information. The assessment must result in a formal report submitted to the Department of Defense’s Supplier Performance Risk System, ensuring transparency and accountability in the supply chain’s cybersecurity posture. Accompanying this evaluation are two critical deliverables: comprehensive security architecture documentation outlining the current state of the system’s defenses and a strategic roadmap specifying actionable steps, timelines, and resource requirements to achieve full compliance with the NIST framework. The work is to be performed at Tinker Air Force Base with a zip code of 73145-8000 and is classified as a subcontract under NAICS code 541690, indicating it falls under other scientific and technical consulting services. The solicitation was posted on May 12, 2026, with responses due by May 20, 2026, and is managed by the Aviation Supply Chain office within the Department of Defense. Failure to meet the requirements or submit accurate documentation to SPRS could impact the contractor’s standing within the DoD supplier ecosystem, making precision and completeness in the assessment and reporting process essential for contractual success.