NIST SP 800-171 Compliance Assessment and System Security Plan Development

This contract involves performing a comprehensive evaluation of a contractor’s information systems to ensure compliance with the NIST SP 800-171 standards. The primary objective is to identify any deficiencies or gaps within the current security controls related to handling controlled unclassified information (CUI) and to develop a compliant System Security Plan (SSP) that addresses these findings. The completed assessment and SSP must then be submitted to the Supplier Performance Risk System (SPRS) in accordance with the requirements outlined in DFARS clause 252.204-7012, which pertains to safeguarding covered defense information. The contract is a subcontract opportunity posted by the ASC Commodities Division under the Department of Defense, with the place of performance specified as New Cumberland, PA (ZIP 17070-5002). The solicitation was made available on May 10, 2026, with a response deadline of May 18, 2026. The applicable NAICS code for this work is 541611, indicating management consulting services related to information technology and security assessments. This opportunity focuses on securing sensitive Department of Defense information by ensuring rigorous compliance with federal cybersecurity mandates.