Subcontractor NIST SP 800-171 Compliance Verification

The contract seeks support for verifying subcontractor compliance with Basic NIST SP 800-171 assessment requirements and corresponding SPRS submissions, ensuring that all downstream suppliers meet federal cybersecurity standards for controlled unclassified information. This effort is critical for the prime contractor to maintain adherence to Department of Defense cybersecurity mandates and to accurately report compliance status through the Supplier Performance Risk System. The work involves reviewing documentation, assessing implementation of security controls, and validating accuracy of SPRS entries to confirm readiness for audit and contractual obligations. The solicitation is classified as a subcontract under NAICS code 541611 and is managed by the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense. The place of performance is specified as Albany, Georgia, with a response deadline of May 7, 2026, and the posting date of April 29, 2026. There is no set-aside type designated, and the effort is open to qualified contractors capable of performing technical compliance verification for NIST 800-171 controls. Participation requires understanding of federal cybersecurity frameworks and experience in subcontractor oversight within defense supply chains.