NIST SP 800-171 Compliance Assessment & System Security Plan Development

The contract involves performing a thorough gap assessment of information systems to evaluate their compliance with the NIST SP 800-171 requirements. Following this assessment, the contractor is responsible for developing a detailed System Security Plan (SSP) that clearly maps the required security controls to the organization’s existing policies, system architecture, and operational procedures. This effort aims to ensure that all security measures align with established federal guidelines and enhance the organization's cybersecurity posture. The work is designated as a subcontract opportunity and falls under the NAICS code 541330, which pertains to engineering services. It is issued by the Department of Defense at the DDSP New Cumberland Facility, located in New Cumberland, postal code 17070-5002. The solicitation was posted on May 15, 2026, with responses due by May 20, 2026. While some specific organizational and point of contact details are not provided, interested parties can access the solicitation through the Department of Defense’s acquisition portal for additional information.