Cybersecurity Compliance & SPRS Reporting

The contract involves performing a cybersecurity assessment based on the NIST SP 800-171 standards, specifically targeting systems that handle Controlled Unclassified Information (CUI). The scope includes documenting the system architecture and submitting the compliance score to the Supplier Performance Risk System (SPRS). This subcontract is designated under NAICS code 541611, related to administrative and management consulting services, and is issued by the Department of Defense's ASC Supplier Operational OEM Division. The work is to be performed in Tracy, California, with a response deadline set for May 20, 2026. The primary objective is to ensure that the contractor demonstrates compliance with cybersecurity requirements necessary to protect sensitive defense-related information. The deliverables include a thorough assessment report, system documentation, and timely reporting of compliance metrics to the SPRS database. This subcontract supports the DoD’s ongoing efforts to safeguard critical information and maintain secure supply chain operations.