Cybersecurity Compliance and SPRS Reporting

The contract involves conducting a NIST SP 800-171 self-assessment or third-party assessment to evaluate cybersecurity compliance with federal requirements. It requires implementing necessary security controls based on the assessment findings and submitting the results to the Supplier Performance Risk System (SPRS), ensuring adherence to the Department of Defense Federal Acquisition Regulation Supplement clauses DFARS 252.204-7012 and 252.204-7020. The contract is categorized as a subcontract under NAICS code 541512, related to computer systems design services. Awarded by the Department of Defense’s DDSP New Cumberland Facility, the work is to be performed in New Cumberland, with a deadline for contract response set shortly after the posting date in late May 2026. This effort is critical in maintaining compliance with stringent DoD cybersecurity reporting and security requirements, enabling continued participation in defense contracts. The contract emphasizes accurate security assessments, timely implementation of controls, and formal reporting to the mandated government systems.