NIST SP 800-171 Compliance Assessment & SPRS Submission

A comprehensive cybersecurity assessment is required to evaluate compliance with NIST SP 800-171 Rev 1, focusing on protecting controlled unclassified information within contractor systems. The assessment must thoroughly document findings, identify gaps in security controls, and provide actionable recommendations to achieve full compliance. Results of the assessment must be submitted to the Department of Defense’s Supplier Performance Risk System, ensuring transparent reporting and alignment with DoD supply chain security requirements. The work is scoped as a subcontract with a response deadline of May 20, 2026, and the performance location is specified as New Cumberland, PA, with a NAICS code of 541611 indicating cybersecurity and information technology services. This task falls under the purview of the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense, emphasizing its critical role in maintaining defense industrial base integrity.