Cybersecurity Compliance & SPRS Reporting

The contract requires strict adherence to NIST SP 800-171 standards to protect controlled unclassified information, compelling the contractor to implement all required security controls and maintain documented evidence of compliance. A self-assessment must be completed in accordance with the NIST framework, with results accurately reported through the Department of Defense Supplier Performance Risk System to ensure visibility and accountability across the supply chain. The task is time-sensitive, with a response deadline of July 31, 2026, and must be performed under a subcontract agreement, indicating the contractor operates as a supplier supporting a larger DoD contract. The work is to be conducted at the place of performance in New Cumberland, Pennsylvania, with the NAICS code 541512 specifying that the scope falls under custom computer programming services, suggesting the compliance efforts are tied to software development or IT system support functions. All activities must align with the Department of Defense’s mandate to secure CUI and demonstrate readiness for audit or review by federal oversight bodies.