Cybersecurity Compliance and SPRS Reporting

The contract requires performing a cybersecurity assessment focused on compliance with the NIST SP 800-171 standards at either a Basic or Medium level. Additionally, a CMMC Level 2 self-assessment must be conducted, with all results submitted to the Department of Defense’s Supplier Performance Risk System (SPRS). This work involves evaluating the contractor's cybersecurity posture to ensure adherence to critical DoD requirements for protecting controlled unclassified information. This subcontract, posted by the ASC Supplier OEM Division of the Department of Defense, is associated with the NAICS code 541618, indicating professional services related to management and technical consulting. The contract was made available on May 10, 2026, with responses due by May 18, 2026. Although specific location details and points of contact are not provided, the contract is part of a broader effort to enhance supply chain cybersecurity risk management through compliance validation and reporting within the DoD ecosystem.