Cybersecurity Compliance & NIST SP 800-171 Implementation

This contract involves developing and maintaining a System Security Plan (SSP) in alignment with NIST SP 800-171 requirements, conducting assessments to evaluate compliance, and submitting a scored summary of the findings. Additionally, it requires the implementation of a Plan of Action and Milestones (POA&M) to address any deficiencies and achieve full compliance with cybersecurity standards. The work is focused on ensuring adherence to federal cybersecurity mandates, particularly those relevant to protecting controlled unclassified information within the Department of Defense supply chain. The contract is a subcontract under the NAICS code 541512, pertaining to computer systems design services, and is issued by the Aviation Supply Chain office of the Department of Defense. The place of performance is located in Cherry Point, North Carolina, with a postal code of 28533-5040. The original solicitation was posted on May 12, 2026, with a response deadline of May 20, 2026. This contract plays a critical role in supporting DoD’s cybersecurity efforts by ensuring subcontractors meet necessary security compliance requirements.