Cybersecurity Compliance Assessment & SPRS Reporting

The contract requires the performance of a cybersecurity compliance assessment aligned with NIST SP 800-171 Rev 1 standards to evaluate the safeguarding of controlled unclassified information within the recipient’s systems. The contractor must conduct a thorough assessment, accurately document all findings, assign a compliance score based on identified gaps, and formally submit the results to the Department of Defense’s Supplier Performance Risk System. The work must be completed by the specified deadline and delivered to a designated location in Tracy, California with a zip code of 95304-5000. In the event that non-compliance issues are identified, the contractor is expected to support the development of a remediation plan to address deficiencies and bring systems into alignment with federal cybersecurity requirements. This subcontract falls under NAICS code 541611 and is issued by the ASC Commodities Division under the Department of Defense, with a response deadline of May 18, 2026.