NIST SP 800-171 Cybersecurity Compliance Assessment & SPRS Reporting

The contract requires the performance of a comprehensive NIST SP 800-171 cybersecurity compliance assessment to ensure adherence to federal protections for controlled unclassified information. This includes developing a detailed System Security Plan that outlines the organization’s security controls, documenting all implemented safeguards, and ensuring alignment with the 110 required security requirements specified in the NIST framework. The ultimate goal is to achieve a full compliance score by accurately mapping controls, resolving any gaps, and submitting verified results through the Supplier Performance Risk System to officially report compliance status to federal authorities. The work is to be conducted for the ASC Commodities Division under the Department of Defense, with performance location specified at Camp Pendleton, California, ZIP code 92055-5677. This is a subcontract opportunity under NAICS code 541611, which pertains to management, scientific, and technical consulting services. Proposals must be submitted by May 21, 2026, with the solicitation posted on May 13, 2026. While no set-aside designation is indicated, bidders must be prepared to deliver precise documentation and verification outputs capable of withstanding federal audit standards to ensure full compliance and successful SPRS reporting.