Cybersecurity Compliance and SPRS Assessment Support

The subcontract seeks support for a prime contractor to achieve compliance with NIST SP 800-171 standards, focusing on implementing and validating security controls required for safeguarding controlled unclassified information. The contractor will conduct a thorough system security assessment to evaluate the current state of cybersecurity posture, identify gaps, and recommend corrective actions aligned with the NIST framework. This includes documenting control implementation, performing testing, and ensuring all necessary documentation is prepared for audit readiness. A critical deliverable is the submission of a summary security score to the Supplier Performance Risk System, which directly impacts the prime contractor’s standing within the Department of Defense supply chain. The work must be completed in alignment with Defense Logistics Agency requirements and the broader DoD cybersecurity mandates, with all activities performed under the NAICS code 541512 for computer systems design services. The response deadline for this subcontract is May 15, 2026, and performance is expected to support defense infrastructure operations across unspecified locations, with no set-aside provisions applied.