NIST SP 800-171 Compliance Assessment and SPRS Submission Support

The contract involves performing a cybersecurity compliance assessment for a Department of Defense contractor to ensure adherence to NIST SP 800-171 Revision 1 standards for protecting Controlled Unclassified Information (CUI). The scope of work includes evaluating the contractor’s systems against the required security controls, documenting the assessment findings, and submitting the results to the DoD Supplier Performance Risk System (SPRS). The submission must include a completed compliance table detailing the system security plan, the Commercial and Government Entity (CAGE) code, a description of the architecture, the date of the assessment, and an overall compliance summary score, with a target score of 110. This subcontract opportunity is categorized under NAICS code 541611 and is posted by the Department of Defense, specifically under the Medical Supply Chain FSH agency. The place of performance is identified as Camp Pendleton, with a zip code of 92055-5627. The solicitation was posted on May 10, 2026, with a response deadline of May 18, 2026. The contract’s primary aim is to support the DoD’s cybersecurity requirements by verifying and documenting compliance, thereby facilitating continued operational security for the contractor’s sensitive information systems.