Cybersecurity Compliance Assessment & SPRS Reporting

A cybersecurity compliance assessment is being sought to evaluate a Department of Defense contractor’s information system against the requirements of NIST SP 800-171 Rev 1, with the goal of achieving full compliance. The scope includes a detailed analysis of the system architecture, documentation of all relevant components and controls, and the calculation of a System Security Plan Rating System (SPRS) score to reflect current compliance status. The contractor must deliver a comprehensive remediation plan that identifies gaps in security controls, prioritizes corrective actions, and outlines a clear path to meet all NIST 800-171 requirements. This assessment is critical for maintaining eligibility for DoD contracts and ensuring the protection of controlled unclassified information. The work is to be performed at the designated location in New Cumberland, Pennsylvania, with a response deadline of May 21, 2026, under a subcontract structured under NAICS code 541611 for management, scientific, and technical consulting services.