Cybersecurity Compliance Assessment & SPRS Reporting

The contract involves performing a comprehensive cybersecurity assessment in accordance with NIST SP 800-171 Revision 1, focusing on identifying and documenting compliance with required security controls. Key tasks include conducting the assessment, accurately documenting findings, calculating an overall cybersecurity score, and submitting the results to the Department of Defense’s Supplier Performance Risk System (SPRS). Additionally, if any gaps or deficiencies are found, the contractor is expected to support remediation planning efforts to address and close those vulnerabilities. This subcontract opportunity, posted by the Department of Defense's ASC Commodities Division, targets services classified under NAICS Code 541611, which pertains to administrative management and general management consulting services. The work is to be performed primarily in Tracy, California, with submission deadlines set for responses by mid-May 2026. The contract does not specify any set-aside designation or organization type but is centered on enhancing DoD contractor cybersecurity posture through compliance verification and risk management support.