Subcontractor NIST Assessment & SPRS Score Coordination

The contract requires the performance of basic NIST SP 800-171 assessments for subcontractors to ensure compliance with cybersecurity requirements for controlled unclassified information. This includes evaluating subcontractor systems against the NIST framework, documenting findings, and providing support to achieve accurate SPRS score submissions. Assistance with documentation preparation, evidence collection, and rebuttal strategies for any deficiencies identified during assessments is also a core component of the work. The scope is focused on enabling subcontractors to meet Department of Defense cybersecurity standards and maintain eligibility for contractual obligations. The contract is classified as a subcontract under NAICS code 541611 and is issued by the ASC Commodities Division within the Department of Defense. Performance is required at Cherry Point, North Carolina, with a zip code of 28533-5040. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026. While no specific set-aside type or point of contact is provided, the work is intended to support the broader cybersecurity compliance goals of the DoD across its supply chain. All activities must align with federal cybersecurity mandates and be conducted in a manner that facilitates timely and accurate SPRS score reporting.