Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires the development of a comprehensive System Security Plan (SSP) aligned with NIST SP 800-171 standards to protect Controlled Unclassified Information (CUI) within the ASC Commodities Division’s environment at Hill AFB. This effort includes a full assessment of current cybersecurity controls, identifying gaps between existing practices and NIST requirements, and implementing necessary measures to achieve compliance. The contractor must deliver a detailed report that quantifies the organization’s cybersecurity maturity score based on the assessment outcomes, ensuring transparency and accountability in the posture of CUI safeguards. This subcontract is issued under NAICS code 541512 for computer systems design services and is bound by a tight turnaround, with responses due by August 7, 2026. The work must be performed at Hill AFB, Utah, with no set-aside classifications specified. The effort is part of a broader Department of Defense initiative to strengthen cybersecurity hygiene across its contractor ecosystem, emphasizing timely compliance and accurate documentation of security control implementation. The successful bidder will be responsible for ensuring all findings are documented, remediation plans are actionable, and final scoring meets federal standards for CUI protection.