Cybersecurity Assessment and SPRS Reporting Services

The contract requires performing cybersecurity assessments at varying levels—annual Basic, triennial Medium, or High—based on the standards outlined in NIST SP 800-171. These assessments must be conducted thoroughly, with the findings submitted to the Supplier Performance Risk System (SPRS) to ensure compliance and proper risk management. Additionally, the contractor is expected to provide support during government audits, ensuring that audit requirements and inquiries are addressed in a timely and efficient manner. This subcontract opportunity is issued by the Department of Defense’s ASC Supplier Operations OEM Division and is associated with the NAICS code 541611, which pertains to Administrative Management and General Management Consulting Services. The place of performance is specified as Cherry Point, with the provided ZIP code 28533-5040. Interested parties must respond by May 20, 2026, following the posting date of May 12, 2026. The contract supports ongoing efforts to enhance and maintain cybersecurity compliance among Department of Defense suppliers.