Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 standards, ensuring comprehensive documentation of security controls for information systems handling controlled unclassified information. The contractor must perform a formal assessment of compliance with the NIST framework, generate a scored summary report reflecting adherence to all required controls, and submit this documentation to demonstrate the current compliance posture. Any identified deficiencies must be addressed through the creation and implementation of a Plan of Action and Milestones, tracking corrective actions with clear timelines and assigned responsibilities to achieve full compliance. The contract is classified as a subcontract under NAICS code 541512, with performance required at Cherry Point, North Carolina, 28533-5040. The work supports the Department of Defense through its Aviation Supply Chain office, focusing on securing sensitive data within defense-related systems. The solicitation, posted on May 12, 2026, requires responses by May 20, 2026, and emphasizes strict adherence to federal cybersecurity requirements with measurable outcomes. The contractor is expected to deliver not only documentation but also actionable remediation efforts that ensure sustained compliance beyond initial implementation.