NIST SP 800-171 Compliance Assessment & Reporting

The contract entails conducting a thorough assessment of information systems to ensure compliance with the NIST SP 800-171 security controls, which are designed to protect controlled unclassified information. The successful contractor will be responsible for developing a detailed System Security Plan (SSP) that documents the current security posture and outlines the implementation of required controls. Upon completion of the assessment and SSP development, the findings must be reported to the Supplier Performance Risk System (SPRS), ensuring transparency and accountability within the Department of Defense’s supply chain. This subcontract opportunity, posted on May 22, 2026, and closing on May 28, 2026, falls under NAICS code 541611, which pertains to administrative management and general management consulting services. The work will be performed in New Cumberland, ZIP code 17070-5002, under the auspices of the Maritime Supply Chain division of the Department of Defense. Although specific details such as the solicitation number, point of contact, and organization type are not provided, the contract emphasizes compliance with federal cybersecurity standards critical for safeguarding defense-related information systems.