Cybersecurity Compliance Assessment & SPRS Reporting

The contract requires the performance of a comprehensive cybersecurity compliance assessment in accordance with NIST SP 800-171 Rev 1 standards to evaluate the current security posture of the system and identify gaps relative to required controls. The contractor must develop a complete System Security Plan that documents all security controls, implementation procedures, and risk mitigation strategies, ensuring alignment with federal requirements for protecting controlled unclassified information. In addition to the assessment and planning, the contractor is responsible for submitting all compliance data to the Supplier Performance Risk System, including a detailed timeline outlining the steps and milestones necessary to achieve full compliance with a target score of 110. The work is to be performed at the designated location in Jacksonville, Florida, under a subcontract structure managed by the Department of Defense’s Aviation Supply Chain organization. Responses are due by May 19, 2026, following a posting date of May 11, 2026, with the solicitation tied to a NAICS code associated with administrative management and general management consulting services.