NIST SP 800-171 Compliance Assessment & SPRS Reporting

The contract requires a comprehensive assessment of all NIST SP 800-171 Rev 1 security controls to ensure full compliance, with the goal of achieving a complete compliance score and submitting the results to the Supplier Performance Risk System. The work includes preparing and maintaining all necessary documentation, most notably the System Security Plan, to support audit readiness and ongoing regulatory adherence. The assessment must be thorough, covering all applicable controls outlined in the NIST publication, and must result in verifiable evidence of compliance. The task is structured as a subcontract under the Department of Defense, specifically for the Medical Supply Chain MD Surg FSF organization, with performance required at Williamsburg, Virginia, ZIP 23185-5830. The solicitation was posted on May 12, 2026, and responses are due by May 18, 2026. The NAICS code 541611 indicates this involves information technology consulting services, emphasizing the technical and compliance expertise needed. All deliverables must align with federal cybersecurity standards and be submitted through the designated government systems to meet contractual obligations.