NIST SP 800-171 Compliance Assessment & SPRS Submission

This contract requires performing a thorough cybersecurity assessment focused on determining compliance with the NIST SP 800-171 Revision 1 standards. The contractor is expected to identify and document the current security posture relative to these federal guidelines, emphasizing safeguarding Controlled Unclassified Information (CUI). Following the assessment, the findings must be formally recorded and submitted to the Department of Defense’s Supplier Performance Risk System (SPRS) to support ongoing risk management and compliance verification efforts. The work is listed as a subcontract opportunity under the NAICS code 541611, indicating professional and management consulting services. The Department of Defense’s ASC Supplier Oper OEM Division is overseeing the contract, with tasks to be performed in New Cumberland, Pennsylvania (ZIP code 17070-5002). The solicitation was posted on May 12, 2026, with a response deadline of May 20, 2026, highlighting a rapid turnaround period for proposal submissions. This contract plays a critical role in ensuring that DoD suppliers maintain required cybersecurity standards essential for protecting sensitive defense-related information.