Cybersecurity Compliance and SPRS Assessment Support

The contract requires comprehensive cybersecurity compliance support to ensure adherence to NIST SP 800-171 standards across prime and subcontractor networks under Department of Defense procurement obligations. This includes conducting detailed assessments of information systems to evaluate compliance with the security controls outlined in NIST SP 800-171, as well as generating and submitting System Security Plan Reporting System (SPRS) documentation to accurately reflect each contractor’s cybersecurity posture. The work is structured to meet the contractual mandates of DFARS Clause 252.204-7012, ensuring that all parties handling controlled unclassified information demonstrate proper safeguarding practices and maintain current, verified SPRS scores. The effort is scoped under a subcontract arrangement with the Defense Logistics Agency, operating under the NAICS code 541612 for Management, Scientific, and Technical Consulting Services. Performance of the work is tied to the broader DoD requirement for supply chain cybersecurity resilience, with assessments targeting not only prime contractors but also their subcontractors to enforce end-to-end compliance. There is no specified geographic limitation for performance, meaning tasks may be executed remotely or on-site depending on contractor infrastructure and audit needs. The contract is designed to be ongoing and scalable to support evolving DoD cyber requirements, with accurate SPRS reporting serving as a critical metric for maintaining eligibility in defense contracting.