Cybersecurity Compliance Assessment & SPRS Reporting

A cybersecurity compliance assessment is being sought under the Department of Defense’s SPRS program to evaluate the implementation of NIST SP 800-171 Rev 1 controls across a systems environment located at Mayport Naval Station. The contractor will conduct a thorough review of the system architecture, identify gaps in control implementation, and deliver a formal SPRS score that reflects current compliance posture. Additional required deliverables include a detailed deficiency report outlining each non-compliant control and a Plan of Action and Milestones that maps corrective actions, timelines, and responsible parties to achieve full compliance. This subcontract is issued under NAICS code 541611 and is tied to the solicitation SPE4A526T105G, with responses due by May 7, 2026. The assessment must be conducted in alignment with DoD requirements to ensure adherence to federal cybersecurity standards and support the overall security posture of the organization.