Subcontractor CUI Compliance Flow-Down Management

This contract involves managing and verifying subcontractor compliance with federal cybersecurity standards, specifically NIST SP 800-171 and DFARS 252.204-7012, which govern the protection of controlled unclassified information (CUI). The responsibilities include conducting System Security Plan (SSP) reviews, readiness assessments, and maintaining Supplier Performance Risk System (SPRS) records to ensure that all subcontractors meet the required security protocols for handling sensitive information. Issued by the Department of Defense under the ASC SUPPLIER OPER OEM DIVISION, this subcontract is categorized under NAICS code 541611, which pertains to administrative management and general management consulting services. The work is to be performed primarily at a location in Cherry Point, with a proposal response deadline set for May 20, 2026. The contract emphasizes maintaining ongoing compliance flow-down from prime contractors to subcontractors, ensuring robust cybersecurity practices are enforced throughout the supply chain.