Cybersecurity Compliance Assessment & Reporting Services

This contract involves performing assessments based on the NIST SP 800-171 Rev 1 standards to evaluate system security plans, document the current implementation status, and report the findings to the Supplier Performance Risk System (SPRS). Key deliverables include providing compliance scores, full implementation dates, Commercial and Government Entity (CAGE) codes, and detailed descriptions of the system architectures. The work is related to cybersecurity compliance, ensuring that contractors meet required security requirements for protecting sensitive defense information. The contract is a subcontract opportunity issued by the Department of Defense's ASC Commodities Division, with the place of performance in New Cumberland, Pennsylvania. It falls under the NAICS code 541611, which covers administrative management and general management consulting services. The solicitation was posted on May 11, 2026, with a response deadline of May 19, 2026. This opportunity emphasizes the importance of timely and accurate security assessments to support defense supply chain security and compliance reporting.