NIST SP 800-171 Cybersecurity Assessment and SPRS Reporting

The contract requires the performance of a NIST SP 800-171 cybersecurity assessment on the contractor’s information systems to evaluate compliance with federal security requirements for protecting controlled unclassified information. The assessment must result in a calculated security score that reflects the contractor’s adherence to the 110 security controls outlined in the NIST publication. This score, along with supporting documentation, must be submitted to the Supplier Performance Risk System to ensure transparency and accountability within the Department of Defense’s supply chain. The work is classified as a subcontract under NAICS code 541611, indicating services related to administrative management and general management consulting. Performance is to be conducted in support of the Subsistence FSE Supply Chain under the Department of Defense, with the place of performance listed as FPO, ZIP 96669. The solicitation was posted on May 11, 2026, and responses are due by May 15, 2026, indicating a tight turnaround requiring prompt execution and accurate reporting.