NIST SP 800-171 Compliance Assessment & System Security Plan Development

The contract involves performing a cybersecurity compliance assessment based on the NIST SP 800-171 standard, which addresses the protection of controlled unclassified information in non-federal systems and organizations. The contractor is expected to evaluate the current security posture, score compliance levels, and develop a comprehensive System Security Plan (SSP) that details how the organization meets the NIST requirements. This SSP will be submitted via the Supplier Performance Risk System (SPRS) as part of the Department of Defense's compliance and risk management processes. This subcontract opportunity, posted by the ASC Commodities Division within the Department of Defense, is focused on the location at New Cumberland, ZIP code 17070-5002. The NAICS code for this contract is 541611, which pertains to administrative and general management consulting services. Prospective contractors must respond by May 21, 2026, following the posting date of May 18, 2026. The contract facilitates DoD’s need to ensure its contractors adhere to stringent cybersecurity standards essential for safeguarding sensitive defense information.