Cybersecurity Compliance & SPRS Reporting

The contract requires support for achieving NIST SP 800-171 compliance, including the assessment of current cybersecurity posture, documentation of controls designed to protect Controlled Unclassified Information, and the submission of cybersecurity ratings through the Supplier Performance Risk System. The work is focused on ensuring alignment with federal cybersecurity standards for organizations handling CUI and involves detailed evaluation, reporting, and validation of security practices to meet Department of Defense requirements. Performance will be conducted in Tracy, California, with a ZIP code of 95304-5000, and the scope falls under NAICS code 541690, indicating it is a subcontract for other scientific and technical consulting services. The solicitation is issued by the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense and is classified as a subcontract with no specific set-aside designation. Responses must be submitted by May 18, 2026, with the opportunity posted on May 10, 2026. The work is critical for maintaining supply chain cybersecurity readiness and ensuring suppliers meet mandatory compliance thresholds for DoD contracts. Successful execution requires expertise in NIST frameworks, CUI handling protocols, and the SPRS reporting process, with deliverables directly influencing the supplier’s risk rating and eligibility to continue supporting defense-related activities.