Cybersecurity Compliance Assessment & SPRS Scoring

The contract requires the execution of a NIST SP 800-171 Rev 1 cybersecurity compliance assessment, either through a self-assessment or by engaging a third-party evaluator, to verify the implementation of required security controls within information systems handling controlled unclassified information. The assessment must thoroughly document all system controls, identify gaps, and produce a summarized scoring outcome that reflects the level of compliance with the NIST framework. This score must then be formally submitted to the Supplier Performance Risk System, ensuring transparency and accountability within the Department of Defense’s acquisition ecosystem. The effort is tied to a subcontract under the Defense Logistics Agency and aligns with the NAICS code for administrative management and general management consulting services, indicating a focus on compliance advisory rather than technical implementation. The solicitation is closed as of May 29, 2026, with the posting date reflecting its availability for response prior to the deadline.