Cybersecurity Compliance Assessment and System Security Plan (SSP) Development

The contract requires a comprehensive gap assessment of information systems against the National Institute of Standards and Technology Special Publication 800-171 Revision 1, focusing on identifying deficiencies in existing security controls compared to the required standards for protecting controlled unclassified information. This assessment must thoroughly evaluate the system architecture, policies, procedures, and technical implementations to determine compliance gaps and provide actionable recommendations. The deliverable includes the development of a full System Security Plan that clearly documents all security controls, their implementation status, and how they align with NIST 800-171 requirements, ensuring the system meets federal cybersecurity specifications. The work is scoped as a subcontract under the Department of Defense's Aviation Supply Chain initiative, with performance required at New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026, indicating a tight turnaround for delivering a technically rigorous and well-documented compliance package. The North American Industry Classification System code 541611 signifies that the work falls under Management, Scientific, and Technical Consulting Services, emphasizing the need for expert knowledge in federal cybersecurity frameworks. The contractor must demonstrate proven experience in conducting NIST 800-171 assessments and producing acceptable System Security Plans for defense-related systems.