Cybersecurity Compliance & SPRS Assessment Support

The contract requires support to a prime contractor in achieving compliance with NIST SP 800-171 standards for protecting controlled unclassified information within nonfederal information systems. The effort focuses on implementing required security controls, conducting internal assessments, and preparing documentation to demonstrate alignment with the framework. This includes addressing gaps, establishing policies and procedures, and ensuring that all cybersecurity measures meet Department of Defense expectations under DFARS regulations. The ultimate goal is to prepare and submit a completed assessment to the Supplier Performance Risk System with accurate and verifiable results, enabling the prime contractor to maintain its eligibility for DoD contracts. The work is to be performed at Pearl Harbor, Hawaii, with a ZIP code of 96860-5033, and falls under the NAICS code 541512 for computer systems design services. The opportunity is structured as a subcontract and was posted on May 10, 2026, with responses due by May 18, 2026. The contracting activity is managed by the ASC Commodities Division under the Department of Defense, and all support activities must be executed in strict accordance with federal cybersecurity requirements without deviation. Timely and accurate submission to SPRS is critical to avoid disruptions in contract performance or procurement eligibility.