Cybersecurity Compliance and SPRS Assessment Support

The contract seeks a subcontractor to support a prime contractor in achieving compliance with NIST SP 800-171 standards for protecting controlled unclassified information within DoD systems. The work involves conducting a thorough gap analysis to identify deficiencies in current cybersecurity controls, developing a detailed remediation plan to address those gaps, and ultimately preparing and submitting a formal assessment via the Supplier Performance Risk System. The objective is to ensure the prime contractor meets all DoD cyber requirements for contract eligibility and performance. All deliverables must align strictly with NIST guidelines and SPRS submission protocols. Performance will be centered at Pearl Harbor, Hawaii, with the subcontractor expected to deliver expert-level cybersecurity advisory services within a tight timeframe, as the solicitation closes on August 3, 2026. The NAICS code 541512 indicates the work falls under Computer Systems Design Services, underscoring the technical nature of the support required. The contracting activity is under the Department of Defense’s Maritime Supply Chain ESOC Buys office, and the successful subcontractor must have proven experience in federal cybersecurity compliance, SPRS documentation, and remediation strategy execution to meet the stringent expectations of the DoD’s cybersecurity framework.