Cybersecurity Compliance Assessment & SPRS Reporting

The contract requires the performance of cybersecurity compliance assessments aligned with NIST SP 800-171 Rev 1 at Basic, Medium, or High risk levels, determined by the sensitivity and criticality of the information systems involved. The work includes detailed documentation of the information system architecture, identification of control gaps, and the development of remediation plans aimed at achieving full compliance with a target score of 110. All assessment findings and compliance results must be formally submitted to the Supplier Performance Risk System for official record and evaluation. The contractor is expected to provide thorough analysis and actionable recommendations to bridge compliance deficiencies and ensure adherence to federal cybersecurity standards. This subcontract is issued under NAICS code 541612 and is associated with the Department of Defense’s Aviation Supply Chain ESOC Buys organization. Performance is specified to occur in Canton, Ohio, with a zip code of 44720-4534. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026. While no set-aside classification is specified, the opportunity is structured as a subcontract and requires precise execution of cybersecurity evaluation and reporting tasks to meet stringent DoD compliance requirements.