Cybersecurity Compliance and NIST SP 800-171 Implementation

The contract requires the development and implementation of a System Security Plan aligned with NIST SP 800-171 Rev 1 standards to ensure robust cybersecurity controls are established and maintained across systems handling sensitive government information. This includes conducting a comprehensive self-assessment of security posture, documenting compliance findings, and submitting the assessment results to the Supplier Performance Risk System to fulfill federal reporting obligations. The contractor must be prepared to support and participate in government-led cybersecurity evaluations, providing necessary documentation and demonstrations of control effectiveness throughout the process. All work is to be performed in Albany, Georgia, under a subcontract arrangement within the Department of Defense’s ASC Supplier Oper OEM Division, targeting organizations proficient in federal cybersecurity compliance. The solicitation was posted on May 10, 2026, with responses due by May 18, 2026, under NAICS code 541512 for custom computer programming services.