NIST SP 800-171 Compliance Assessment & System Security Plan Development

The contract requires the performance of comprehensive cybersecurity assessments to ensure compliance with NIST SP 800-171 Rev 1 for systems that handle Controlled Unclassified Information CUI. This includes the development of a detailed System Security Plan SSP documenting the system architecture, security controls implementation, and operational procedures aligned with NIST standards. The contractor must assign proper Commercial and Government Entity CAGE codes to the systems under evaluation and submit all assessment findings through the Supplier Performance Risk System SPRS to maintain transparency and regulatory adherence. The work is performed under a subcontract structure with a primary focus on meeting Department of Defense cybersecurity mandates for CUI protection. The place of performance is specified as New Cumberland PA 17070-5002 and the solicitation was posted on May 12 2026 with a response deadline of May 20 2026 under NAICS code 541611 for management consulting services.