Cybersecurity Assessment and Compliance Reporting

The contract involves conducting a comprehensive cybersecurity assessment to ensure compliance with NIST SP 800-171 standards, specifically aimed at protecting Controlled Unclassified Information (CUI). The contractor is required to develop a detailed System Security Plan (SSP) that outlines the security measures and controls in place. Following the assessment and plan development, the results must be submitted to the Department of Defense’s Supplier Performance Risk System (SPRS) to document compliance with CUI protection requirements. This subcontract, titled "Cybersecurity Assessment and Compliance Reporting," is overseen by the ASC Commodities Division of the Department of Defense, with performance expected at Hill Air Force Base (84056-5734). The solicitation was posted on May 13, 2026, with proposals due by May 21, 2026. It falls under the NAICS code 541618, indicating professional management consulting services, and centers on ensuring that defense contractors meet mandated cybersecurity standards essential for safeguarding sensitive defense-related information.