NIST SP 800-171 Cybersecurity Compliance Assessment & SPRS Reporting

This contract involves conducting a comprehensive assessment to ensure compliance with the NIST SP 800-171 cybersecurity standards, specifically targeting the identification and documentation of required security controls. The contractor is responsible for developing a detailed System Security Plan (SSP) that outlines the current security posture and remediation measures. The process includes evaluating existing cybersecurity measures, documenting findings, and submitting the compliance results to the Supplier Performance Risk System (SPRS) to achieve a full compliance score. The subcontract is issued by the Department of Defense’s ASC Commodities Division with the work to be performed at Camp Pendleton, zip code 92055-5677. The solicitation was posted on May 13, 2026, with a response deadline of May 21, 2026. The contract falls under NAICS code 541611, which pertains to administrative management and general management consulting services. While there is no specified set-aside type or organization preference, the focus is on ensuring DoD suppliers meet critical cybersecurity requirements to safeguard controlled unclassified information.