NIST SP 800-171 Compliance Assessment and SPRS Submission

This contract requires the performance of NIST SP 800-171 compliance assessments for Department of Defense contractors who handle Controlled Unclassified Information. The contractor will evaluate systems and processes against the NIST framework to determine adherence to security requirements, assign compliance scores based on the assessment findings, and formally submit those scores to the Supplier Performance Risk System. In cases where deficiencies are identified, the contractor must develop detailed Plans of Action and Milestones to address each non-compliant control, outlining corrective actions, responsible parties, and timelines for resolution. The work is conducted as a subcontract under the Defense Logistics Agency, with the North American Industry Classification System code 541611 indicating it falls under management consulting services. Although the place of performance and point of contact details are unspecified, the contract is tied to DoD contractors requiring ongoing cybersecurity compliance validation to meet federal standards for protecting CUI.