Cybersecurity Compliance Assessment & SPRS Reporting

The contract requires the performance of a comprehensive Cybersecurity Compliance Assessment aligned with NIST Special Publication 800-171 to ensure adherence to Department of Defense cybersecurity standards. This includes conducting a thorough evaluation of existing security controls, identifying gaps, and developing a detailed System Security Plan that documents policies, procedures, and protective measures for handling controlled unclassified information. The assessment must result in a fully compliant SSP that accurately reflects the organization’s current security posture and remediation plan for any deficiencies found. Upon completion, all findings and documentation must be formally submitted to the Supplier Performance Risk System to fulfill DoD cybersecurity reporting obligations. The work is classified as a subcontract under NAICS code 541611 and is solicited by the ASC SUPPLIER OPER AE AND AF DIV within the Department of Defense. The performance location is specified as New Cumberland, Pennsylvania with a zip code of 17070-5002. Although the solicitation number is not listed, the contract opportunity is accessible via the DIBBS system and has a very tight response window, with submissions due just five days after posting on July 27, 2026. There is no set-aside designation provided, indicating the opportunity is open to all eligible subcontractors without preference. The urgency of the timeline and the specificity of the requirements underscore the critical nature of timely and accurate compliance deliverables to maintain defense contract eligibility.