Security Assessment & SPRS Submission Support

The contract requires the performance of a security assessment aligned with NIST SP 800-171 standards, either conducted internally or through a qualified third party, to evaluate the organization’s compliance with federal cybersecurity requirements. The assessment must be scored using the CMMC Assessment Guide to determine the organization’s cybersecurity maturity level, and the resulting findings and scores must be formally submitted to the Supplier Performance Risk System (SPRS). This effort is essential for demonstrating compliance with Department of Defense cybersecurity expectations and maintaining eligibility as a supplier within the defense supply chain. The work must be completed and reported prior to the response deadline of August 20, 2026, under a subcontract arrangement classified under NAICS code 541690 for other scientific and technical consulting services. The agency responsible is the Department of Defense through its Land Supply Chain division.