Cybersecurity Compliance and Reporting

This contract involves implementing the NIST SP 800-171 security controls to ensure the protection of Controlled Defense Information (CDI). The awarded subcontractor will be responsible for developing detailed System Security Plans (SSPs) that outline the security requirements and practices in place. Additionally, the contract requires conducting self-assessments to evaluate compliance with these security controls. The results of these assessments must then be reported through the Supplier Performance Risk System (SPRS) to maintain transparency and accountability. The contract is categorized under NAICS code 541618 and is issued by the Department of Defense's ASC Commodities Division. The work will be performed primarily in New Cumberland, with a specified zip code of 17070-5002. The solicitation was posted on May 11, 2026, with a response deadline of May 19, 2026, indicating a focused and time-sensitive procurement process. This subcontract emphasizes the critical importance of cybersecurity compliance within defense-related operations, ensuring that sensitive information is safeguarded according to established federal standards.