Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the execution of a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 Rev 1 to ensure the proper handling of Controlled Unclassified Information. The scope includes conducting a detailed evaluation of current security controls, identifying gaps in compliance, and developing a complete System Security Plan that documents policies, procedures, and technical safeguards necessary to meet federal requirements. All findings and the finalized SSP must be submitted to the Supplier Performance Risk System to validate adherence to mandated standards for protecting CUI within the contractor’s environment. The work is structured as a subcontract under the Department of Defense’s DDSP NEW CUMBERLAND FACILITY, with performance obligations centered at the New Cumberland location with ZIP code 17070-5002. The task falls under NAICS code 541611, indicating it involves scientific and technical consulting services. The solicitation was posted on May 8, 2026, with a strict response deadline of May 13, 2026, requiring timely submission of proposals that demonstrate technical competence, familiarity with NIST frameworks, and proven experience in implementing cybersecurity controls for defense contractors. Failure to meet compliance obligations may result in loss of contract eligibility or exposure to penalties for unsecured CUI.