NIST SP 800-171 Compliance Assessment & SPRS Reporting

This contract involves conducting a comprehensive assessment of an organization's compliance with the security controls outlined in NIST SP 800-171 Revision 1. The objective is to achieve a full compliance score by evaluating all relevant controls, preparing and maintaining necessary documentation such as the System Security Plan (SSP), and submitting the compliance results to the Supplier Performance Risk System (SPRS). The work is to be performed as a subcontract under the NAICS code 541611, which pertains to administrative management and general management consulting services. The contract is issued by the Department of Defense under the Medical Supply Chain MD SURG FSF agency, with the work location specified as Williamsburg, VA, zip code 23185-5830. The solicitation was posted on May 12, 2026, with responses due by May 18, 2026. This effort aims to ensure that the contractor meets stringent cybersecurity requirements necessary for protecting controlled unclassified information within the Defense Industrial Base.