NIST SP 800-171 Compliance Assessment and SPRS Submission Support

A cybersecurity compliance assessment is required to evaluate a Department of Defense contractor’s adherence to NIST SP 800-171 Rev 1 standards for safeguarding Controlled Unclassified Information. The assessment must document the contractor’s current security controls, identify gaps, and produce a comprehensive compliance table that includes the System Security Plan, CAGE code, network architecture description, assessment date, and a summary score targeting 110 out of 110 possible points. All findings and documentation must be submitted to the DoD Supplier Performance Risk System, ensuring full transparency and alignment with federal cybersecurity mandates for CUI protection. The work is contracted under a subcontract arrangement with the agency identified as the Medical Supply Chain FSH, operating under the Department of Defense. The task is performance-based and must be completed at Camp Pendleton, California, with a zip code of 92055-5627. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. The NAICS code 541611 indicates this falls under Computer Systems Design and Related Services, and the work must be executed with precision to meet the strict compliance requirements of the DoD’s cybersecurity framework.