NIST SP 800-171 Compliance Assessment & System Security Plan Development

This contract involves performing assessments based on NIST Special Publication 800-171 to evaluate an organization's compliance with requirements for protecting Controlled Unclassified Information (CUI). The scope includes delivering comprehensive System Security Plans (SSPs), documenting system architecture, providing detailed assessment scoring with a target score of 110, and preparing Plans of Action and Milestones (POAMs) to address and remediate any identified deficiencies. The work supports ensuring that security controls meet federal standards for safeguarding sensitive information. Issued by the ASC Commodities Division of the Department of Defense, this subcontract falls under the NAICS code 541611, which pertains to administrative management and general management consulting services. Although specific location and contact details are not provided, the solicitation was posted on May 8, 2026, with responses due by May 13, 2026. The opportunity is publicly accessible through the designated government procurement portal. This contract emphasizes adherence to stringent cybersecurity frameworks in a defense context, aiming to enhance organizational information security posture in compliance with federal mandates.