Cybersecurity Compliance (NIST SP 800-171) & SPRS Reporting

This contract involves conducting a comprehensive assessment based on the NIST SP 800-171 standards to evaluate cybersecurity measures related to handling Controlled Unclassified Information (CUI). The contractor is required to develop a System Security Plan (SSP) that details the current security posture and plans to address any gaps or deficiencies. Following the assessment, results must be reported to the Supplier Performance Risk System (SPRS), including the creation of a Plan of Action and Milestones (POA&M) to address identified vulnerabilities. Issued by the Department of Defense’s Aviation Supply Chain ESOC BUYS office, the subcontract work will take place in Johnston, with responses due by May 20, 2026. The contract aligns with NAICS code 541618, which relates to management consulting services. Its primary goal is to ensure compliance with federal cybersecurity requirements and improve the security posture of contractors handling sensitive aviation supply chain information.