Cybersecurity Compliance and SPRS Reporting

The contract requires the performance of a cybersecurity assessment aligned with NIST SP 800-171 standards to ensure the proper safeguarding of Controlled Unclassified Information. This assessment must be conducted thoroughly to verify compliance with all applicable security controls designed to protect CUI, and the results must be formally documented and submitted to the Supplier Performance Risk System. The evaluation is a critical component of maintaining defense supply chain integrity and ensuring that contractors meet federal cybersecurity requirements. This is a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with a NAICS code indicating it falls under Computer Systems Design and Related Services. The work is intended to support broader defense cybersecurity initiatives by validating that security practices are effectively implemented and reported. Although the place of performance and point of contact are not specified, the submission of findings to SPRS is mandatory, making timely and accurate reporting a key contractual obligation. The contract was posted on June 24, 2026, and is part of ongoing efforts to enforce cybersecurity accountability across the defense industrial base.