Cybersecurity Compliance & SPRS Management

This contract requires the contractor to ensure full compliance with NIST Special Publication 800-171 for safeguarding federal information systems, including the implementation of all required security controls and continuous monitoring practices. The contractor must maintain a valid System for Award Management (SPRS) score at all times, reflecting current adherence to cybersecurity standards and demonstrating ongoing compliance through documented evidence and audits. All security measures must be applied to protect controlled unclassified information processed, stored, or transmitted on systems under the contractor's control, with particular emphasis on risk management, access controls, and incident response. The contract is classified as a subcontract under the NAICS code 541611 for Management Consulting Services and is associated with the Department of Defense, specifically the DCSO-COLUMBUS-DIVISION-2. Performance is expected to be carried out in Columbus, with all cybersecurity practices aligned to federal mandates regardless of the physical location of operations. Failure to maintain compliance or an up-to-date SPRS score may result in contract termination or financial penalties, and the contractor is expected to proactively address any gaps in security posture without prompting. The contract underscores a strict, non-negotiable requirement for continuous cybersecurity vigilance and accountability in handling sensitive government information.