Cybersecurity Compliance and SPRS Management

The contract entails ongoing support for maintaining compliance with NIST SP 800-171 standards, ensuring continuous adherence to federal cybersecurity requirements for a prime contractor under the Department of Defense. This includes regular updates to the Supplier Performance Risk System (SPRS) assessments, which track and report the cybersecurity posture of subcontractors to meet Defense Industrial Base standards. The work involves the systematic generation and submission of cybersecurity documentation and reporting to confirm compliance status, mitigate risk exposure, and support audit readiness throughout the lifecycle of the prime contract. The subcontract is governed under NAICS code 541512 for computer systems design services and is managed by the Defense Logistics Agency. While specific performance locations and point of contact details are not provided, the effort is critical to sustaining eligibility for defense contract work and must be executed under the timeline and obligations associated with the prime agreement referenced under contract SPE7LX26FB314. The services are part of a broader framework to uphold the security of controlled unclassified information within the defense supply chain.