Cybersecurity Compliance (NIST SP 800-171 Assessment and SPRS Reporting)

The contract requires the performance of a NIST SP 800-171 cybersecurity assessment to ensure compliance with DFARS 252.204-7012 requirements for both prime contractors and subcontractors handling controlled unclassified information. The successful bidder must conduct a thorough evaluation of security controls outlined in NIST SP 800-171 and submit the resulting assessment data to the Supplier Performance Risk System, verifying compliance with federal cybersecurity standards for defense supply chain entities. This effort is critical to maintaining the integrity of information systems used in support of Department of Defense operations and must be completed in alignment with established guidelines to avoid noncompliance penalties. The work is classified as a subcontract under the NAICS code 541512 for Computer Systems Design Services and is managed by the Defense Logistics Agency within the Department of Defense. The solicitation was posted on July 20, 2026, and the place of performance is not specified, indicating the work may be performed remotely or at the contractor’s facility. Compliance with all reporting obligations through SPRS is mandatory, and failure to meet deadlines or accuracy standards will result in contractual and reputational consequences. The contract supports broader defense cybersecurity initiatives by enforcing uniform protection measures across the supply chain to safeguard sensitive defense information.