Cybersecurity Compliance & SPRS Reporting Support

The contract requires the performance of a NIST SP 800-171 cybersecurity assessment to evaluate and document the implementation of security controls compliant with federal standards for protecting controlled unclassified information. The successful respondent must compile detailed documentation of these controls and submit the resulting assessment data to the Supplier Performance Risk System, ensuring full transparency and compliance with Department of Defense requirements. In addition to the assessment and reporting, the contractor will provide ongoing support for cyber incident reporting, facilitating timely and accurate disclosures in accordance with established protocols. The role also includes ensuring flow-down compliance across subcontractors and supply chain partners, reinforcing end-to-end adherence to NIST guidelines throughout the contracting ecosystem. Work is to be performed at the location indicated by the zip code 20640-4624 in Indian Head, and the solicitation is classified as a subcontract under NAICS code 541611. Responses are due by May 19, 2026, with the opportunity posted on May 11, 2026, under the auspices of the ASC Commodities Division within the Department of Defense.