Cybersecurity Compliance Assessment & SPRS Reporting

The contract requires a thorough evaluation of a contractor’s System Security Plan to determine adherence to NIST Special Publication 800-171 standards, including calculating a current compliance score, identifying specific gaps in security controls, and preparing a formal report for submission to the Supplier Performance Risk System. The assessment must scrutinize all relevant security requirements outlined in the framework to pinpoint areas where the contractor’s practices fall short of mandated controls. The deliverable includes a detailed documentation of deficiencies alongside actionable recommendations for remediation. In addition to the assessment, the contractor must develop a strategic roadmap to guide the target organization toward full compliance with NIST SP 800-171. This roadmap should prioritize remediation efforts, define timelines, allocate necessary resources, and outline steps to maintain ongoing compliance. The work is scoped to be performed in San Diego, California, under a subcontract arrangement, and responses are due by May 26, 2026, following a solicitation issued under NAICS code 541611 by the Department of Defense’s Land Supply Chain. All findings and the compliance roadmap must be formally submitted to SPRS to update the contractor’s official risk profile.