Cybersecurity Assessment and SPRS Reporting Services

The contract requires the performance of annual Basic, triennial Medium, or High-level cybersecurity assessments aligned with NIST SP 800-171 standards to evaluate the protection of controlled unclassified information within systems supporting Department of Defense operations. The assessments must be conducted at the designated place of performance in Cherry Point, North Carolina, and the resulting findings must be systematically documented and submitted to the Supplier Performance Risk System to ensure transparency and compliance with federal cybersecurity requirements. The contractor is also expected to provide ongoing support during government audits, enabling verification of security controls and facilitating timely remediation of identified gaps. This subcontract is classified under NAICS code 541611, indicating it falls within the scope of management consulting services, specifically centered on cybersecurity evaluation and reporting. The posting date is May 12, 2026, with a response deadline of May 20, 2026, suggesting a short, targeted solicitation window for qualified subcontractors to bid. The contracting activity is the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense, underscoring the mission-critical nature of maintaining security posture across its supply chain. The focus on SPRS reporting ensures that performance and compliance data are standardized and accessible to federal evaluators, reinforcing accountability and continuous improvement in cybersecurity practices for defense contractors.