Cybersecurity Assessment and SPRS Reporting

A cybersecurity assessment must be conducted in accordance with NIST SP 800-171 Rev 1 to evaluate compliance with safeguarding controlled unclassified information requirements, with all findings documented and reported to the Supplier Performance Risk System to fulfill Defense Federal Acquisition Regulation Supplement obligations. The assessment must systematically verify implementation of all required security controls, identify gaps, and produce a formal report that accurately reflects the current state of cybersecurity posture for defense-related systems. The contract is a subcontract under the Department of Defense, specifically managed by the Maritime Supply Chain, with performance required at the location in New Cumberland, Pennsylvania, ZIP code 17070-5002. The solicitation is classified under NAICS code 541512 for custom computer programming services and is open for response until August 5, 2026, with a posting date of July 31, 2026. All deliverables must align with federal cybersecurity compliance standards and be submitted through the designated SPRS portal to ensure the contractor’s eligibility and performance record remain in good standing within the defense supply chain.