NIST SP 800-171 Compliance Assessment and System Security Plan Development

The contract involves conducting a comprehensive assessment for compliance with the NIST SP 800-171 cybersecurity standards and developing a corresponding System Security Plan (SSP) to meet Department of Defense requirements. The contractor will be responsible for evaluating current cybersecurity protocols against NIST guidelines, producing detailed documentation of system controls, and submitting the assessment results, including the compliance score and a timeline for implementation, to the Supplier Performance Risk System (SPRS). The work is to be performed primarily at FPO, with a focus on ensuring DoD cybersecurity compliance for the Aviation Supply Chain ESOC BUYS under the Department of Defense. This subcontract opportunity falls under the NAICS code 541611, indicating a focus on administrative management and general management consulting services. The solicitation was posted on May 12, 2026, with a response deadline of May 20, 2026, requiring timely submission. While some specific details such as contact points and office addresses are not provided, the contract’s primary goal is clearly centered on strengthening cybersecurity posture through thorough assessment and documentation, essential for safeguarding sensitive defense information.