NIST SP 800-171 Compliance Assessment and System Security Plan Development

The contract requires execution of a comprehensive NIST SP 800-171 Rev 1 compliance assessment for systems handling Covered Defense Information, with deliverables including a fully developed System Security Plan and detailed documentation of implemented security controls. The efforts must align with federal requirements for protecting sensitive information within the Department of Defense environment, ensuring all controls are accurately mapped, validated, and recorded. The contractor is expected to support remediation planning by identifying gaps in current security posture and proposing actionable, prioritized steps to achieve full compliance. Performance of this work is centered at Fort Lewis, Washington, with a strict submission deadline of May 6, 2026, following a solicitation issued on April 30, 2026. The contract is categorized as a subcontract under NAICS code 541611, indicating it involves computer systems design services, and is part of a broader Medical Supply Chain initiative. All activities must be conducted with rigorous attention to DoD standards, and the successful respondent must demonstrate the capability to execute these tasks with precision, timeliness, and full adherence to NIST guidelines for securing federal contract information.