Cybersecurity Compliance & NIST SP 800-171 Assessment

This contract involves performing a basic assessment of an organization’s compliance with NIST SP 800-171 cybersecurity controls. The contractor is responsible for evaluating existing security measures, developing a detailed System Security Plan (SSP) that outlines how the organization meets the required standards, and submitting the resulting assessment score to the Department of Defense's Supplier Performance Risk System (SPRS). The work is designated as a subcontract and falls under the NAICS code 541611, which covers administrative management and general management consulting services. The contract is issued by the Department of Defense’s DDSP New Cumberland Facility, located in New Cumberland, Pennsylvania, with a specified postal code of 17070-5002. The solicitation was posted on May 15, 2026, and responses are due by May 20, 2026, highlighting a tight turnaround window for submission. There are no specific set-aside requirements indicated, suggesting this subcontract is open to qualified contractors with expertise in cybersecurity compliance assessments aligned with DoD standards. The contract aims to ensure that the contractor provides thorough documentation and verification to support the organization's adherence to DoD cybersecurity mandates.