NIST SP 800-171 Compliance Assessment and SPRS Submission

The contract requires the execution of cybersecurity assessments for Department of Defense contractors to confirm adherence to the NIST Special Publication 800-171 Revision 1 standards, which outline security requirements for protecting Controlled Unclassified Information in nonfederal systems. The assessments must be thorough and objective, evaluating the contractor’s implementation of security controls across technical, operational, and managerial domains as defined by the NIST framework. Upon completion, detailed assessment findings must be submitted to the Supplier Performance Risk System, a centralized DoD platform used to track and manage supplier cybersecurity performance and risk profiles. This subcontract is issued by the ASC Commodities Division under the Department of Defense, with performance expected to be conducted at Tinker Air Force Base, Oklahoma, 73145-8000. The solicitation was posted on May 13, 2026, and responses are due by May 18, 2026, indicating a tight turnaround for offerors to prepare and submit proposals. The North American Industry Classification System code 541611 identifies the work as management consulting services, specifically emphasizing cybersecurity compliance consulting. The nature of the contract demands expertise in DoD cybersecurity directives, familiarity with the SPRS system, and the ability to deliver accurate, timely, and actionable assessment reports that directly impact contractor eligibility and supply chain security posture.