Cybersecurity Compliance and SPRS Reporting

This contract requires comprehensive cybersecurity compliance support aligned with NIST SP 800-171 standards to ensure proper protection of controlled unclassified information within defense subcontracting environments. The effort centers on achieving and maintaining compliance through implementation of required security controls, ongoing monitoring, and documentation to meet federal cybersecurity mandates. A critical component involves preparing and submitting accurate System for Award Management (SAM) Public Rating System (SPRS) assessments to validate compliance posture to the Department of Defense. Additionally, the contractor must establish and maintain procedures for timely cyber incident reporting under DFARS clauses 252.204-7012 and 252.204-7020, ensuring all incidents are detected, documented, and reported within mandated timeframes. The work is performed under a subcontract tied to the Defense Logistics Agency and classified under NAICS code 541512 for computer systems design services, with the expectation that all activities support the broader mission of securing the defense supply chain.