NIST SP 800-171 Cybersecurity Assessment and SPRS Reporting

The contract requires performing a comprehensive assessment of the contractor's information systems in accordance with the NIST SP 800-171 cybersecurity standards. This involves evaluating the security controls in place, calculating an overall security score, and ensuring compliance with the relevant guidelines. Additionally, the results and necessary data must be reported to the Supplier Performance Risk System (SPRS) to facilitate monitoring and risk management by the Department of Defense. This subcontract is designated under NAICS code 541611 and is administered by the Department of Defense’s Subsistence FSE Supply Chain office. The work is to be performed at a location identified as FPO with ZIP code 96669. The solicitation was posted on May 11, 2026, with a response deadline set for May 15, 2026, indicating a brief window for proposal submission. The contract focuses on cybersecurity evaluation and reporting to support government supply chain security and risk assessment efforts.