NIST SP 800-171 Compliance Assessment & Reporting

The contract requires the execution of a comprehensive NIST SP 800-171 assessment to evaluate the security controls of an information system aligned with federal cybersecurity standards for protecting controlled unclassified information. The contractor is responsible for developing a detailed System Security Plan that documents the implementation of required security controls, outlines risk management strategies, and ensures alignment with NIST guidelines. All findings from the assessment and the finalized SSP must be submitted through the Supplier Performance Risk System to demonstrate full compliance and obtain an official scoring and rating. This engagement is structured as a subcontract under the Department of Defense’s Defense Logistics Agency, with the North American Industry Classification System code 541611 indicating it falls under management, scientific, and technical consulting services. The work must be completed in accordance with federal mandates and delivered by the solicitation's specified timeframe to meet compliance obligations.