NIST SP 800-171 Compliance Implementation & SPRS Assessment Support

This contract seeks support for implementing, documenting, and assessing NIST SP 800-171 security controls to protect Controlled Unclassified Information within the Department of Defense environment. The work requires a thorough understanding of the NIST framework to ensure all required safeguards are properly configured, validated, and recorded to meet federal compliance standards. A critical component of the effort includes preparing and submitting the Supplier Performance Risk System (SPRS) assessment, which evaluates a contractor’s cybersecurity posture based on the implemented controls and documented evidence. The performance location is tied to Fort Lewis with a zip code of 98433-9500, and the work falls under NAICS code 541611, indicating it involves management, scientific, and technical consulting services focused on cybersecurity and compliance. The subcontract is solicited under the Medical Supply Chain MD Surg FSF and requires responders to submit proposals by May 6, 2026. The success of this effort depends on accurate documentation, alignment with NIST guidelines, and timely SPRS submission to satisfy DoD requirements for securing CUI across the supply chain.