Cybersecurity Compliance Assessment & NIST SP 800-171 Implementation

The contractor is tasked with conducting a comprehensive cybersecurity assessment of their information system to ensure full compliance with NIST Special Publication 800-171 Revision 1, focusing on the protection of controlled unclassified information. This includes developing a detailed System Security Plan that documents policies, procedures, and control implementations, identifying any gaps or deficiencies in existing security controls, and providing actionable recommendations for remediation. The deliverables also require preparation of a Supplier Performance Risk System submission, along with any necessary rebuttal documentation to address potential findings or score impacts, ensuring transparency and alignment with federal cybersecurity requirements. The work is performed under a subcontract for the Department of Defense’s ASC Commodities Division, with performance required at the location in New Cumberland, Pennsylvania, 17070-5002. The solicitation, issued under NAICS code 541611 for Management Consulting Services, was posted on May 11, 2026, with responses due by May 19, 2026. The contractor must demonstrate expertise in NIST SP 800-171 frameworks, experience with SPRS submissions, and the ability to produce high-quality, audit-ready documentation that supports federal compliance objectives within the defined timeline.