NIST SP 800-171 Compliance Assessment & SSP Development

The contract requires the performance of a comprehensive NIST SP 800-171 Rev 1 compliance assessment to evaluate an information system’s adherence to federal cybersecurity requirements for protecting controlled unclassified information. This includes developing a full System Security Plan that documents security controls, policies, and procedures aligned with NIST standards, identifying any deficiencies or gaps in current implementational controls, and formulating a targeted remediation roadmap to address those gaps. The final deliverables must be submitted to the Supplier Performance Risk System to update the organization’s security posture in the official government database, ensuring visibility and compliance tracking by federal oversight entities. The work is structured as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance centered at New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026, indicating an eight-day window for submission. The associated NAICS code 541611 classifies this as an Information Technology Consulting Services requirement, underscoring the need for specialized expertise in federal cybersecurity frameworks. All deliverables must be completed professionally and in strict alignment with NIST guidelines to meet DoD compliance obligations and support continued contracting eligibility.