Cybersecurity Compliance and NIST SP 800-171 Implementation

This contract focuses on developing and implementing a System Security Plan (SSP) that aligns with the requirements of NIST SP 800-171 Revision 1, ensuring cybersecurity compliance for controlled unclassified information within non-federal systems. The scope includes conducting self-assessments to evaluate the effectiveness of security controls, submitting results to the Supplier Performance Risk System (SPRS), and providing ongoing support for government-led cybersecurity evaluations. The intent is to strengthen the security posture and maintain compliance with Department of Defense cybersecurity standards. The contract is classified as a subcontract under NAICS code 541512 and is issued by the ASC Supplier Operations OEM Division of the Department of Defense. The work is to be performed in Albany, with a response deadline set shortly after the posting date in May 2026. This effort is critical for ensuring that contractors’ cybersecurity measures meet federal requirements, supporting the DoD’s initiatives for safeguarding sensitive information in the defense supply chain.