Cybersecurity Compliance Assessment & SPRS Reporting

This contract involves performing cybersecurity assessments in accordance with the NIST SP 800-171 Revision 1 standards at varying levels of rigor—Basic, Medium, or High—determined by the assessed risk. The contractor is responsible for documenting the information system architecture and conducting a thorough gap analysis to identify compliance shortfalls. Following this, the development of a remediation plan is required to help achieve full compliance, targeting a compliance score of 110. The assessment results must be compiled and submitted to the Supplier Performance Risk System (SPRS) as part of the reporting requirements. The work is set to take place in Canton, with the Department of Defense's Aviation Supply Chain ESOC BUYS serving as the agency overseeing the contract. The contract type is a subcontract under the NAICS code 541612, which pertains to administrative management and general management consulting services. The solicitation was posted on May 13, 2026, with the response deadline by May 21, 2026. This contract emphasizes enhancing cybersecurity posture through methodical assessments and ensures that contractors meet the required federal cybersecurity standards before proceeding.