NIST SP 800-171 Cybersecurity Assessment & SPRS Reporting

The contract requires a comprehensive cybersecurity assessment to ensure compliance with NIST SP 800-171 Revision 1, focusing on the evaluation and validation of security controls relevant to protected unclassified information. The work includes developing or updating a System Security Plan that documents the implementation of required safeguards, aligning with federal standards for contractors handling sensitive DoD data. The assessment must result in a scored evaluation to be formally submitted to the Department of Defense’s Supplier Performance Risk System, ensuring transparency and accountability in cybersecurity posture across the supply chain. The task is issued as a subcontract under the NAICS code 541611 and is performance-based at Robins Air Force Base, Georgia, with a submission deadline of May 18, 2026. The solicitation originates from the ASC Commodities Division within the Department of Defense, and the successful offeror will be responsible for delivering accurate, complete, and timely compliance documentation to meet federal contractual obligations. All deliverables must reflect current NIST guidance and support the DoD’s broader objective of strengthening cybersecurity resilience among its defense contractors.