Cybersecurity Compliance and SPRS Assessment Support

The contract requires the implementation of NIST SP 800-171 Basic Assessment procedures to evaluate cybersecurity controls within the organization and its subcontractors, ensuring full alignment with DFARS cybersecurity requirements. The successful bidder must document all assessment findings comprehensively, validate compliance across the supply chain, and submit the final results to the Supplier Performance Risk System (SPRS) in accordance with federal guidelines. This includes verifying that all subcontractors meet the mandated security controls and that their compliance status is accurately reflected in the SPRS database. The work is to be performed at New Cumberland, Pennsylvania, with a submission deadline of May 18, 2026, and the contract is classified as a subcontract under NAICS code 541611, managed by the ASC Commodity Division of the Department of Defense. The scope emphasizes rigorous documentation, timely reporting, and operational adherence to federal cybersecurity frameworks to mitigate risk and maintain eligibility for DoD contracts. Compliance must be maintained not only by the primary contractor but also extended to all downstream subcontractors handling covered defense information.