NIST SP 800-171 Cybersecurity Compliance Assessments

The contract requires performing formal cybersecurity assessments of defense contractors’ information systems to determine adherence to NIST SP 800-171 Rev 1 security controls. The assessment process involves identifying gaps in implemented safeguards, evaluating the effectiveness of existing measures, and documenting findings in accordance with the Supplier Performance Risk System (SPRS) reporting standards. These evaluations are critical to ensuring that contractors handling sensitive defense information meet federal cybersecurity requirements and mitigate risks associated with unauthorized access or data compromise. This subcontract falls under the NAICS code 541611 for management consulting services and is managed by the Defense Logistics Agency under the Department of Defense. The work is performance-based and must be conducted regardless of specific location, as no place of performance is designated. The contract was posted on August 1, 2026, and is linked to the broader procurement vehicle SPE7LX21D0087, with the specific award identified as SPE7LX26FB0S4. The deliverables are centered exclusively on compliance validation and SPRS-compliant reporting, with no additional services or deliverables outlined.