Cybersecurity Compliance Assessment & SPRS Reporting

The contract requires the execution of a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 Rev 1 standards, focusing on evaluating the implementation of security controls within the contractor’s information systems. The scope includes the detailed documentation of existing controls, the development of System Security Plans and Plans of Action and Milestones to address gaps, and the formal submission of all assessment results to the Supplier Performance Risk System. This work is essential to demonstrate adherence to federal cybersecurity requirements for organizations handling controlled unclassified information. The assessment must be thorough, precise, and fully traceable to ensure regulatory compliance and risk mitigation. The contract is classified as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at the location in New Cumberland, Pennsylvania, ZIP 17070-5002. The solicitation was posted on May 13, 2026, and responses are due by May 18, 2026, indicating a tightly constrained timeline for submission. The NAICS code 541611 designates the service as Management, Scientific, and Technical Consulting Services, emphasizing the need for technical expertise in cybersecurity and compliance frameworks. All deliverables must meet federal compliance standards and be submitted accurately to the SPRS platform to avoid performance penalties or contract disqualification.