Cybersecurity Compliance and SPRS Reporting

The contract involves performing a NIST SP 800-171 Basic Assessment to evaluate the cybersecurity posture of the contractor's systems, followed by the preparation of a System Security Plan (SSP). A critical requirement is to achieve and submit a Supplier Performance Risk System (SPRS) score of 110 or higher to demonstrate audit readiness for the prime contractor. This effort supports compliance with Department of Defense cybersecurity standards and facilitates readiness for related audits. The work is a subcontract opportunity under the "Cybersecurity Compliance and SPRS Reporting" initiative posted by the DDSP New Cumberland Facility, part of the Department of Defense. The place of performance is located in New Cumberland, Pennsylvania (zip code 17070-5002). The solicitation was made available on May 22, 2026, with a response deadline of May 28, 2026. The contract falls under NAICS code 541618, which covers management consulting services, reflecting the advisory and compliance nature of the tasks required.