Cybersecurity Compliance Implementation & SPRS Reporting

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls within a system operating in Phoenix, Arizona, with a ZIP code of 85043. This includes conducting a comprehensive system assessment to evaluate adherence to the specified cybersecurity framework and preparing all necessary documentation to support compliance reporting. A critical deliverable is the System Security Plan summary, which must accurately reflect the implemented controls and organizational policies. The contractor is also responsible for submitting all compliance data to the Supplier Performance Risk System to achieve a full compliance score, ensuring the system meets federal cybersecurity standards for handling controlled unclassified information. This subcontract is associated with the Department of Defense through the ASC SUPPLIER OPER OEM DIVISION and falls under NAICS code 541612, indicating a focus on computer systems design and related services. While no specific set-aside designation is provided, the solicitation is open for response until May 20, 2026, and was posted on May 12, 2026. The work environment and performance location are designated as Phoenix, with no additional information provided on point of contact or organizational type. All deliverables must align with federal cybersecurity mandates, and the contractor must ensure continuous adherence to NIST controls through active monitoring, documentation, and timely reporting to maintain compliance status.