NIST SP 800-171 Self-Assessment and SPRS Reporting

The contract requires the performance of a self-assessment against the NIST SP 800-171 cybersecurity requirements to evaluate compliance with protection standards for controlled unclassified information. The scope includes documenting all findings from the assessment, calculating a compliance score based on the evaluated controls, and formally submitting the results to the Supplier Performance Risk System. This process is critical for demonstrating adherence to federal cybersecurity standards and maintaining eligibility for DoD contracts. The assessment must be thorough, accurately reflecting the current state of information security practices across the organization. The subcontract is associated with the Department of Defense’s Active Devices Division and has a specified place of performance in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. It is classified under NAICS code 541612, indicating services related to computer systems design. Although the solicitation number and point of contact are not provided, the response deadline has already passed as of the posted date, suggesting this activity is part of an ongoing compliance obligation rather than a new acquisition. The submission must be completed in the SPRS system to ensure the contractor's risk profile remains current and acceptable within the DoD supply chain.