NIST SP 800-171 Compliance Assessment and SSP Development

The contract requires the execution of a NIST SP 800-171 Rev 1 compliance assessment for Department of Defense contractor systems, focusing on ensuring adherence to security requirements designed to protect controlled unclassified information. The scope includes developing a new System Security Plan or updating an existing one to reflect current practices, controls, and risk management strategies aligned with NIST standards. This plan must accurately document the system’s security posture, including implemented safeguards, responsibilities, and monitoring procedures. In addition, the contractor must prepare and submit a Security Performance Rating System (SPRS) response to meet DoD reporting obligations, ensuring all assessment findings and control implementations are properly documented and validated. The work is being performed under a subcontract for the ASC Commodities Division, with the place of performance located in Cherry Point, North Carolina, at the zip code 28533-5040. The solicitation, posted on May 11, 2026, has a response deadline of May 19, 2026, and falls under the NAICS code 541611, which corresponds to Management Consulting Services. The contract does not specify a set-aside type, and while no point of contact is provided, the opportunity is accessible via the DIBBS platform. Success in fulfilling this contract requires precise alignment with federal cybersecurity frameworks and timely, accurate documentation to support DoD compliance requirements.