Cybersecurity Compliance (NIST SP 800-171 / SPRS Reporting)

This contract focuses on providing support for compliance with NIST SP 800-171 standards, including conducting a comprehensive gap analysis to identify areas needing improvement. The scope also covers preparing the necessary documentation and submitting the Supplier Performance Risk System (SPRS) score to ensure that cybersecurity measures meet required standards. Additionally, the work involves reporting relevant information tied to the contractor’s CAGE code and ensuring alignment with Cybersecurity Maturity Model Certification (CMMC) Level 2 practices, which are aimed at safeguarding controlled unclassified information within the supply chain. Issued by the Department of Defense’s Strategic Acquisition Directorate, this subcontract falls under NAICS code 541512, which covers computer systems design services. The solicitation was posted on May 8, 2026, with a response deadline of May 13, 2026, emphasizing a relatively quick turnaround. While specific details such as location and point of contact were not provided, the contract clearly targets organizations capable of ensuring cybersecurity compliance within defense contractor systems, enhancing overall security posture in accordance with federal requirements.