Cybersecurity Compliance Assessment & System Security Planning

The contract requires the performance of a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 Rev 1 standards to ensure the protection of controlled unclassified information within the Department of Defense environment. The contractor must evaluate current security controls, identify gaps, and document findings to support the development of a complete System Security Plan that outlines the organization’s safeguarding measures. Additionally, the contractor is responsible for creating a detailed Plan of Action and Milestones that prioritizes remediation efforts, defines timelines, and assigns responsibilities for addressing all identified deficiencies. All deliverables must be finalized and submitted to the DoD supplier performance risk system to meet federal compliance requirements. The work is to be performed at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and is classified as a subcontract under the NAICS code 541611, which corresponds to administrative management and general management consulting services. The solicitation was posted on April 22, 2026, and responses must be submitted no later than April 30, 2026. The contracting entity is part of the Aviation Supply Chain under the Department of Defense, and the effort supports broader defense cybersecurity initiatives by ensuring subcontractor systems meet mandatory federal information security standards.