NIST SP 800-171 Compliance Assessment & System Security Plan Development

The contract requires a thorough evaluation of information systems to ensure adherence to NIST SP 800-171 security requirements, focusing on identifying gaps in current controls and implementing necessary measures to achieve full compliance. This includes a detailed analysis of the system architecture, data handling practices, access controls, and risk management processes as they relate to protecting controlled unclassified information. The deliverable is a comprehensive System Security Plan that documents all applied and planned security controls, outlines the technical and operational architecture, and provides a clear roadmap for achieving and sustaining compliance with the NIST standard. The effort is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV, with performance expected to align with federal cybersecurity frameworks. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026, with the NAICS code 541611 indicating it falls under administrative management and general management consulting services. All work must be executed in accordance with applicable federal guidelines, and the resulting SSP must serve as a living document to guide ongoing security posture improvements and audits.