Cybersecurity Compliance and SPRS Reporting

The contract requires the performance of a NIST SP 800-171 cybersecurity assessment to evaluate compliance with federal security standards for protecting controlled unclassified information. The results of this assessment must be formally submitted to the Supplier Performance Risk System, ensuring transparency and accountability in the Department of Defense’s supply chain. This obligation extends to subcontractors, necessitating active monitoring and enforcement of their adherence to the same cybersecurity requirements. The work is classified as a subcontract under the NAICS code 541512, indicating it involves computer systems design and related services, and is managed by the Defense Logistics Agency. While the specific location of performance is not detailed, the obligation is tied to federal cybersecurity compliance mandates and is effective as of July 2026.