Subcontractor NIST 800-171 Compliance Verification (Tiered Support)

The contract requires verification that all lower-tier subcontractors have completed a Basic NIST SP 800-171 DoD Assessment within the past three years and are currently registered in the Supplier Performance Risk System. The prime contractor must obtain and submit due diligence reports confirming this compliance for each subcontractor involved in the work. This obligation applies to all tiers of subcontracting under the agreement and is essential to maintaining the required cybersecurity standards for Department of Defense contracts. Failure to substantiate compliance may result in contract nonconformance or termination. The work is associated with NAICS code 541611 and is being managed by the DDSP NEW CUMBERLAND FACILITY under the Department of Defense, with performance centered in NEW CUMBERLAND, Pennsylvania. The solicitation was posted on August 3, 2026, and responses are due by August 6, 2026. No set-aside status is specified, and the contract type is designated as a subcontract. The prime contractor must ensure that all subcontractor compliance documentation is accurate, current, and verifiable through official SPRS records to meet federal cybersecurity requirements.