Cybersecurity Compliance and SPRS Reporting Support

The contract seeks a subcontractor to assist the prime contractor in achieving and maintaining compliance with DFARS cybersecurity requirements, specifically by performing comprehensive assessments based on NIST SP 800-171 standards. This includes evaluating the current security posture of information systems, identifying gaps in control implementation, and supporting the development or revision of comprehensive System Security Plans that document policies, procedures, and controls to protect controlled unclassified information. The subcontractor will be responsible for ensuring all cybersecurity documentation is accurate, complete, and aligned with DoD expectations to facilitate timely and successful submission to the Supplier Performance Risk System. Submission of these assessments and plans through the DoD SPRS platform is a critical deliverable, requiring precise adherence to formatting, content, and deadline requirements. The subcontractor must possess demonstrated expertise in NIST 800-171 compliance, federal contract cybersecurity standards, and the SPRS reporting process. This engagement is time-sensitive, with responses due by May 7, 2026, and is categorized under NAICS code 541611 for management, scientific, and technical consulting services, reflecting the professional and advisory nature of the support required. The work is performed under the Department of Defense, specifically for the ASC SUPPLIER OPER OEM DIVISION, with no geographic restrictions specified for performance.