Cybersecurity Assessment and SPRS Submission

The contract involves conducting a comprehensive NIST SP 800-171 compliance assessment focused on ensuring contractor cybersecurity standards are met. It includes the development of a detailed System Security Plan (SSP) that outlines the security controls in place for protecting controlled unclassified information (CUI). Following the assessment and plan development, the contractor must submit the necessary documentation to the Department of Defense's Supplier Performance Risk System (SPRS) for cybersecurity scoring, which is critical for maintaining eligibility and standing with DoD contracts. This subcontract opportunity falls under the NAICS code 541512 and is managed by the Department of Defense’s ASC Supplier Operations AE and AF Division. The solicitation was posted on May 11, 2026, with a response deadline of May 19, 2026. While specific geographical details for the place of performance are not provided, the contract emphasizes timely and accurate reporting to the SPRS system to support DoD’s cybersecurity risk assessments and contractor performance evaluations. The subcontract aims to facilitate DoD’s compliance and risk management efforts by ensuring contractors meet established cybersecurity requirements.