Cybersecurity Assessment and SPRS Reporting for CUI Systems

This subcontract involves performing cybersecurity assessments in accordance with NIST SP 800-171 Revision 1 for systems that handle Controlled Unclassified Information (CUI). The contractor will be responsible for evaluating the security controls, documenting the findings, and submitting the assessment results to the Supplier Performance Risk System (SPRS). Additionally, the contractor must address any rebuttals or feedback related to the assessment within 14 business days, ensuring timely compliance with government requirements. The contract is issued by the Department of Defense's ASC Commodities Division and pertains to work conducted at Tinker Air Force Base, zip code 73145-8000. The solicitation was posted on May 13, 2026, with a response deadline of May 21, 2026. This subcontract falls under NAICS code 541618, which relates to other management consulting services. While specific organizational details and points of contact are not provided, the project is focused on enhancing cybersecurity posture for DoD systems handling sensitive information, reflecting the department's emphasis on safeguarding controlled information assets.