NIST SP 800-171 Cybersecurity Compliance Assessment

The contractor is required to conduct a self-assessment of their information systems to ensure compliance with NIST SP 800-171 standards for safeguarding Controlled Unclassified Information. This assessment must thoroughly evaluate all applicable security controls related to the protection of CUI and document the current state of implementation across the contractor’s systems. The results of this assessment must be formally submitted to the Supplier Performance Risk System, providing an accurate and complete record of compliance status. The contract is a subcontract under the Department of Defense, with performance expected at Hill AFB, Utah, 84056-5734. It is categorized under NAICS code 541611, indicating it relates to management consulting services, and the response deadline is July 21, 2026. The work must be completed in accordance with federal cybersecurity requirements for defense contractors and the submission to SPRS is mandatory for demonstrating adherence to the mandated security framework. Failure to properly complete and submit the assessment may affect the contractor’s eligibility for future doD work.