SPRS Assessment Submission and Reporting

The contract requires the performance of a comprehensive NIST SP 800-171 assessment to evaluate the implementation and effectiveness of cybersecurity controls within the contractor’s information systems. This includes scoring each control based on compliance status, compiling detailed documentation of findings, and formally submitting the assessment results to the Supplier Performance Risk System (SPRS) as mandated by federal requirements. The work must ensure full audit readiness, with supporting evidence and reporting mechanisms in place to demonstrate adherence to the NIST framework and to address any potential scrutiny from oversight bodies. The contractor is expected to maintain a high level of accuracy and transparency throughout the process to meet government compliance expectations. This subcontract is issued under the NAICS code 541611 for management, scientific, and technical consulting services, with the Department of Defense through its Land Supply Chain organization specifying New Cumberland, Pennsylvania as the place of performance. The solicitation was posted on May 11, 2026, and responses are due by May 22, 2026. While no set-aside designation or point of contact is provided, the urgency and specificity of the deliverables imply a tight timeline requiring prompt submission and readiness for immediate review. All activities must align with DoD cybersecurity standards and ensure the contractor’s systems remain compliant and defensible within the broader defense supply chain ecosystem.