NIST SP 800-171 Compliance Assessment & SPRS Submission

The contract requires a comprehensive cybersecurity assessment of systems handling Controlled Unclassified Information (CUI) aligned with the requirements of NIST Special Publication 800-171 Revision 1. The assessment must evaluate the implementation of security controls outlined in the framework to ensure proper protection of CUI, identifying gaps and areas of non-compliance. The results of this evaluation must be compiled into a formal compliance score, which will be submitted to the Supplier Performance Risk System (SPRS) to update the contractor’s risk profile and demonstrate adherence to federal cybersecurity standards for defense subcontractors. This subcontract is issued under the NAICS code 541611 for Management Consulting Services and is associated with the Department of Defense’s Land Supply Chain. Performance must occur at the designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on May 11, 2026, and all responses are due by May 22, 2026. Failure to complete the assessment and submit the compliance score by the deadline may impact eligibility for future contracting opportunities and could trigger risk-based reviews within the Defense Industrial Base ecosystem.