NIST SP 800-171 Compliance Assessment and System Security Plan Development

The contract requires a comprehensive evaluation of the contractor’s information systems to ensure full alignment with the National Institute of Standards and Technology Special Publication 800-171 security requirements. This assessment must identify any deficiencies or gaps in current controls related to the protection of controlled unclassified information and culminate in the development of a detailed System Security Plan that outlines how all identified weaknesses will be addressed to achieve compliance. The resulting SSP must be thorough, accurate, and structured to meet federal standards for cybersecurity documentation. All findings and the finalized System Security Plan must be submitted to the Supplier Performance Risk System in accordance with Defense Federal Acquisition Regulation Supplement 252.204-7012. The work is scoped as a subcontract under the NAICS code 541611, with performance expected to occur in New Cumberland, Pennsylvania, and responses are due by May 18, 2026. The contract is issued by the ASC Commodities Division of the Department of Defense and is open for bidding under a solicitation posted on May 10, 2026.