Cybersecurity Compliance Assessment & SPRS Reporting

The contract requires comprehensive cybersecurity compliance services focused on implementing and maintaining NIST SP 800-171 Rev 1 security controls for Department of Defense contractor information systems. Key responsibilities include assessing current security postures, documenting control implementations, and developing or updating System Security Plans to ensure alignment with federal cybersecurity standards. Ongoing maintenance of these controls is essential to sustain compliance, with particular emphasis on accurate and timely SPRS reporting to reflect the contractor’s security status within the DoD’s Supplier Performance Risk System. The work must be performed in support of the ASC SUPPLIER OPER OEM DIVISION, with performance taking place at FPO, ZIP 09587-4037. This is a subcontract under NAICS code 541611, and responses are due by May 21, 2026, following a posting date of May 13, 2026.