Cybersecurity Compliance (NIST SP 800-171) Assessment & SSP Development

This contract involves performing a comprehensive cybersecurity assessment aligned with the NIST SP 800-171 standards, focusing on evaluating the security controls and requirements necessary to protect controlled unclassified information. The contractor is responsible for developing a detailed System Security Plan (SSP) that documents the current security posture and planned controls. Additionally, the contractor must submit the required compliance data to the Supplier Performance Risk System (SPRS) to facilitate proper registration and validation using the associated Commercial and Government Entity (CAGE) code. The subcontract has a response deadline set for May 18, 2026, and pertains to services under the NAICS code 541612, which relates to administrative management and general management consulting services. The Department of Defense, specifically the ASC Commodities Division, is the contracting agency, with the place of performance designated in New Cumberland, zip code 17070-5002. This contract underscores the Department's commitment to ensuring that contractors meet rigorous cybersecurity requirements to safeguard sensitive information in compliance with federal standards.