Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the execution of a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 standards, targeting the protection of controlled unclassified information within systems operated by the Active Devices Division of the Department of Defense. The scope includes conducting a thorough evaluation of current security controls, developing a detailed System Security Plan that documents the organization's approach to meeting NIST requirements, and formally submitting the findings to the Supplier Performance Risk System to ensure regulatory visibility and accountability. Any identified gaps or deficiencies must be addressed through the creation of a detailed Plan of Action and Milestones, outlining corrective actions, assigned responsibilities, and timelines for resolution. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with zip code 17070-5002, and is structured as a subcontract under NAICS code 541611, which classifies it under Management Consulting Services. Responses are due by July 23, 2026, with the solicitation posted on July 20, 2026, indicating a tight turnaround window for interested parties. While no set-aside type is specified, the engagement is critical to maintaining DOD cybersecurity compliance and requires strict adherence to federal standards and documentation protocols to ensure audit readiness and operational security.