Cybersecurity Compliance and SPRS Reporting Services

The contract encompasses ongoing cybersecurity compliance services focused on maintaining adherence to NIST SP 800-171 standards for all prime and subcontractors handling controlled unclassified information. This includes the continuous development, review, and updating of System Security Plans to reflect current security controls, risk assessments, and organizational changes, ensuring alignment with federal requirements for protecting CUI. The contractor is responsible for monitoring compliance posture, implementing necessary corrective actions, and providing timely documentation to support audit readiness and regulatory reporting. In addition to SSP maintenance, the contract requires regular reporting and management of the Supplier Performance Risk System scores, ensuring accurate and up-to-date submission of cybersecurity performance metrics to federal systems. This involves tracking compliance gaps, coordinating remediation efforts across the supply chain, and delivering structured reporting outputs that enable oversight and demonstrate adherence to Department of Defense cybersecurity expectations. The work is conducted under the Defense Logistics Agency as a subcontract governed by NAICS code 541512, supporting broader defense cybersecurity objectives across a complex network of contractors handling sensitive information.