Cybersecurity Compliance & SPRS Reporting

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 standards to ensure compliance with DFARS cybersecurity requirements. The contractor must systematically assess their information system’s security controls, document findings, and submit accurate assessment scores to the Supplier Performance Risk System. This effort is critical to demonstrating adherence to federal cybersecurity mandates and maintaining eligibility for DoD contracting work. The performance location is specified as San Diego, California, with the work falling under NAICS code 541512 for computer systems design services. The solicitation was posted on May 11, 2026, with a response deadline of May 19, 2026, and is structured as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division. While no set-aside status or point of contact details are provided, the requirement is focused on technical execution and reporting rather than procurement or logistical support. Success hinges on precise implementation of NIST controls and timely, verifiable submission of assessment data to SPRS, ensuring continuous compliance and risk mitigation for the DoD supply chain.