Sub-tier Supplier Cybersecurity Compliance Management

This contract requires that all sub-tier suppliers complete a Basic NIST SP 800-171 cybersecurity assessment within the last three years to ensure compliance with established cybersecurity standards. The contractor is responsible for collecting, validating, and reporting this compliance data to the Supplier Performance Risk System (SPRS) as part of their subcontract obligations. The effort supports the Department of Defense and is managed by the ASC Commodities Division, with the place of performance located in New Cumberland, ZIP code 17070-5002. The contract is categorized under the NAICS code 541611 and is designated as a subcontract with a response deadline set for May 18, 2026. Although some details such as the solicitation number and specific agency points of contact are not provided, the primary focus remains on ensuring sub-tier suppliers meet cybersecurity compliance requirements to mitigate risk and maintain secure supply chain practices. All activities must be completed within the defined timeframe to align with DoD security mandates.