Cybersecurity Compliance Assessment and SPRS Reporting

The contract requires execution of a medium or high-level cybersecurity assessment aligned with NIST Special Publication 800-171 Revision 1 and its accompanying assessment guide, 800-171A, to evaluate compliance with security requirements for protecting controlled unclassified information. The scope includes developing a comprehensive System Security Plan that documents controls, policies, and procedures in place to meet these standards. All findings from the assessment must be formally submitted to the Supplier Performance Risk System, ensuring transparency and accountability within the Department of Defense supply chain. Should deficiencies or non-compliance issues be identified, the contractor is obligated to provide a formal rebuttal addressing each finding with corrective actions, justifications, or mitigation strategies as necessary. The work is tied to a subcontract under the Department of Defense’s ASC SUPPLIER OPER AE AND AF DIV, with performance centered at Tobyhanna, Pennsylvania, 18466-5050, and must be completed no later than July 21, 2026, following a solicitation posted on July 16, 2026. The NAICS code 541611 categorizes this as an information technology services engagement focused on cybersecurity consulting and compliance.