NIST SP 800-171 Compliance Assessment & SPRS Submission

The contract requires the performance of a NIST SP 800-171 compliance assessment for the prime contractor’s systems, either at the Basic or High level, tailored to the sensitivity of the controlled unclassified information being protected. This includes a thorough documentation of all applicable security controls, collection of supporting evidence, and identification of gaps between current practices and NIST requirements. A detailed gap analysis must be conducted and a remediation plan developed to address deficiencies, ensuring alignment with federal cybersecurity standards. All findings, evidence, and corrective action plans are to be systematically compiled and submitted to the Supplier Performance Risk System (SPRS) to fulfill mandated compliance obligations. The assessment must be completed and submitted by the response deadline of May 7, 2026, with performance activities centered at Fort Hood, Texas, 76544. This subcontract falls under NAICS code 541611, indicating it relates to scientific and technical consulting services, and is issued by the Department of Defense’s Aviation Supply Chain ESOC Buys unit. The effort is critical to maintaining defense supply chain security and ensuring the prime contractor meets federal mandates for protecting sensitive information, making timely and accurate reporting in SPRS a condition of continued contractual compliance.