NIST SP 800-171 Compliance Assessment and SPRS Submission

The contract requires a comprehensive assessment of the contractor’s information systems against the National Institute of Standards and Technology Special Publication 800-171 Revision 1 standards. This includes a detailed evaluation of the implementation and effectiveness of security controls designed to protect controlled unclassified information. The assessment must be thorough, systematically verifying each required control, identifying gaps or deficiencies, and determining the overall compliance posture. Upon completion, a summary score reflecting the assessment results must be generated and formally submitted to the Supplier Performance Risk System, ensuring transparency and accountability within the Department of Defense’s vendor risk management framework. The work is classified as a subcontract under NAICS code 541611, with a performance location in Tracy, California, zip code 95304-5000. The solicitation was posted on April 22, 2026, and responses are due by April 30, 2026, placing a strict seven-day window for submission. The contracting activity is under the ASC SUPPLIER OPER OEM DIVISION of the Department of Defense, indicating this assessment supports defense acquisition and supply chain security requirements. Failure to meet deadlines or deliver an accurate, compliant assessment could impact the contractor’s standing in the DoD supplier ecosystem.