Cybersecurity Compliance Assessment & Reporting

This contract involves performing a cybersecurity compliance assessment specifically focused on systems that manage Controlled Unclassified Information (CUI). The scope includes conducting a thorough evaluation based on the NIST SP 800-171 framework, identifying any compliance gaps, and documenting the findings in detail. Additionally, the contractor is responsible for developing a comprehensive System Security Plan (SSP) that outlines security controls and mitigation strategies tailored to the organization's environment. The deliverables also include preparing and submitting the necessary documentation to the Supplier Performance Risk System (SPRS) with the goal of achieving a compliance score of 110. The contract is issued as a subcontract under the Department of Defense's Land Supply Chain agency, targeting entities classified under the NAICS code 541611, which generally covers administrative management and general management consulting services. The response deadline for proposals is May 22, 2026, following the posting date of May 11, 2026. While specific details regarding location and points of contact are not provided, the contracting opportunity is accessible through the Defense Industrial Base Data Repository (DIBBS) platform. This engagement plays a critical role in ensuring that defense supply chain partners meet federal cybersecurity standards necessary for the protection of sensitive, yet unclassified, defense-related information.