NIST SP 800-171 Compliance Assessment & Reporting

The contract requires the contractor to perform comprehensive assessments of system security plans to ensure alignment with NIST Special Publication 800-171 requirements, focusing on identifying gaps and vulnerabilities in cybersecurity controls. Findings must be thoroughly documented and submitted to the Supplier Performance Risk System, with particular attention given to medium or high-risk deficiencies. The contractor is responsible for developing detailed Plans of Action and Milestones for each significant finding, outlining corrective actions, timelines, and responsible parties to facilitate compliance remediation. The work is performance-based and must be executed to meet federal standards for protecting controlled unclassified information in nonfederal systems. This subcontract is issued under NAICS code 541611 for management consulting services and is tied to the Department of Defense’s Land Supplier Operations Vehicle Support organization. All activities are to be performed at the place of performance located in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation closed on August 6, 2026, with responses due by that deadline and the opportunity posted on August 3, 2026. The work supports the broader objective of ensuring third-party systems used in support of DoD operations meet mandatory cybersecurity requirements, with reporting and documentation playing a critical role in maintaining audit readiness and compliance transparency.