NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires conducting cybersecurity assessments of defense contractor information systems to ensure compliance with NIST SP 800-171 Revision 1 standards. This includes evaluating system security controls, documenting system security plans, calculating detailed compliance scores, and officially submitting assessment results to the Supplier Performance Risk System. The work is focused on identifying gaps in security posture and supporting remediation planning for systems found to be non-compliant, ensuring timely corrective actions are taken to meet federal cybersecurity requirements. The performance location is established in Tracy, California, with a ZIP code of 95304-5000. This subcontract falls under the NAICS code 541611 for administrative management and general management consulting services and was posted by the ASC Commodities Division under the Department of Defense. The solicitation was made available on May 12, 2026, with a firm response deadline of May 20, 2026. The contract does not specify a set-aside type and lacks detailed point of contact information, but all work must be completed and reported through the designated government systems, with full accountability for accuracy and timeliness of compliance documentation and submissions.