NIST SP 800-171 Compliance and Cybersecurity Implementation

This contract involves developing and maintaining a System Security Plan (SSP) and implementing the security controls outlined in NIST SP 800-171 to ensure compliance with Department of Defense (DoD) cybersecurity requirements. The contractor is responsible for conducting self-assessments of these controls and submitting the assessment results to the Supplier Performance Risk System (SPRS). The work is performed as a subcontract and pertains specifically to cybersecurity implementation for systems associated with the DDSP New Cumberland Facility located in New Cumberland, PA. The contract, categorized under NAICS code 541512, focuses on system design and cybersecurity services, emphasizing DoD compliance through rigorous security protocols. The solicitation was posted on May 22, 2026, with responses due by May 28, 2026. The key deliverables include the creation and upkeep of the SSP alongside ongoing compliance assessments, critical for maintaining information security within defense-related operations. The contract supports DoD mission assurance by mitigating risks associated with controlled unclassified information (CUI) in contractor information systems.