NIST SP 800-171 Compliance Assessment and Reporting

The contract requires a comprehensive assessment of information systems to ensure full compliance with NIST SP 800-171 Revision 1, encompassing detailed scoring of security controls, development of a complete System Security Plan, and final submission through the Supplier Performance Risk System. The work involves evaluating existing controls against the NIST framework, identifying gaps, and implementing corrective measures to achieve full compliance, with all deliverables properly documented and submitted in accordance with federal reporting standards. The assessment must be conducted with precision and thoroughness to meet the Department of Defense’s stringent cybersecurity requirements for protected information systems. The contract is structured as a subcontract under the LAND SUPPLY CHAIN ESOC BUYS organization, with performance required to be completed at the location in Chambersburg, Pennsylvania, with a zip code of 17201-4150. It is classified under NAICS code 541611 for management, scientific, and technical consulting services, and the response deadline is set for May 13, 2026, following a posting date of May 8, 2026. All deliverables must align with DOD expectations and the submission process through SPRS, ensuring accountability and traceability of compliance efforts across the entire assessment lifecycle.