Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract involves performing a NIST SP 800-171 assessment, developing a System Security Plan (SSP), and reporting compliance to the Department of Defense's Supplier Performance Risk System (SPRS) for handling covered defense information. This subcontract is issued by the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense, with the place of performance located in New Cumberland, ZIP code 17070-5002. The contract falls under the NAICS code 541512, which relates to computer systems design services. The solicitation was posted on May 13, 2026, with a response deadline of May 21, 2026, indicating a relatively short window for submission. The main objectives include ensuring compliance with security requirements outlined in NIST SP 800-171, which is critical for protecting controlled unclassified information within the defense supply chain. The successful contractor will be responsible for assessing existing security controls, preparing detailed documentation in the form of a System Security Plan, and submitting compliance information to the DoD’s SPRS database, thereby supporting the Department of Defense’s cybersecurity standards and risk management efforts.