My company is interested in setting up CPSR-compliant policies and procedures. In my previous lives, I have tracked compliance actions (ie, EEO, TINA, Reps and Certs, etc) at the subcontract level (covering all subsequent Task Orders) and I've also done it on a per Task Order basis.
I think each have their own unique pros and cons. I have my own preference but would like to hear the experience/thoughts of others. Thanks!