Cybersecurity Compliance & SPRS Reporting

The contract requires implementation of NIST Special Publication 800-171 security controls to protect Controlled Unclassified Information across all applicable systems and processes. This includes executing a comprehensive self-assessment of compliance with the specified controls, documenting findings, and officially submitting the assessment results to the Department of Defense Supplier Performance Risk System. Participation is mandatory for any entity handling sensitive government information under this subcontract arrangement. The effort must be completed in alignment with federal cybersecurity standards and deadlines, with no deviations permitted in methodology or reporting format. The subcontract is under the Department of Defense’s Subsistence FSE Supply Chain and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The North American Industry Classification System code 541512 indicates the work involves computer systems design and related services. The response deadline is May 4, 2026, and all submissions must be finalized prior to this date. While the solicitation number is not provided, the official portal for details is available through the DIBBS system. No set-aside provisions are specified, and the contract is open to eligible subcontractors fulfilling the cybersecurity compliance and reporting obligations as outlined.