Cybersecurity Compliance and SPRS Reporting

This contract involves performing a NIST SP 800-171 assessment to evaluate the cybersecurity posture of the contractor’s systems. The scope requires preparing a detailed system security plan that outlines the implementation of security requirements and controls. Following the assessment, the contractor must submit the assessment results to the Supplier Performance Risk System (SPRS), ensuring that any potential findings or discrepancies can be addressed through a rebuttal response, allowing for clarification or dispute of the submitted evaluation. The work is structured as a subcontract opportunity, posted under the Department of Defense’s ASC SUPPLIER OPER AE AND AF DIV, with performance set in New Cumberland, zip code 17070-5002. Respondents must submit their proposals by May 19, 2026. The contract falls under NAICS code 541611, indicating management consulting services, with a focus on assisting the Department of Defense in meeting cybersecurity compliance standards and reporting obligations critical to supply chain risk management.