Cybersecurity Assessment and SPRS Reporting

The contract requires the performance of regular cybersecurity assessments to ensure ongoing compliance with the minimum NIST SP 800-171 Rev 1 score of 110 in the Supplier Performance Risk System. This obligation is critical to maintaining eligibility and trust within the Department of Defense supply chain, as failure to meet or sustain the required score could result in performance penalties or contract termination. The work is to be conducted at the specified place of performance in San Diego, California, and must align with the technical standards and reporting protocols defined by NIST guidelines and the SPRS framework. This is a subcontract under the NAICS code 541611 for investigative services, with a posted date of May 10, 2026, and a response deadline of May 18, 2026. It is managed by the ASC Supplier Operations OEM Division of the Department of Defense, and all deliverables must be submitted through the designated DIBBS platform. The contractor is expected to implement, monitor, and document security controls as required by NIST SP 800-171 Rev 1, and to accurately report assessment results into SPRS to demonstrate continuous compliance. Failure to meet the score threshold or provide timely, accurate documentation may impact future business opportunities with the agency.