NIST SP 800-171 Compliance Assessment and System Security Plan Development

The contract requires the performance of a NIST SP 800-171 assessment to evaluate the security controls in place for handling Controlled Unclassified Information and the development of a comprehensive System Security Plan to formally document those controls and the organization’s compliance posture. The resulting documentation must accurately reflect the current security environment and demonstrate adherence to the requirements outlined in NIST SP 800-171, specifically as they apply to the protection of CUI. All findings and the completed SSP must be submitted to the Department of Defense through the Supplier Performance Risk System to fulfill federal compliance obligations. This is a subcontract under the Department of Defense, with the contracting activity managed by the Fluid Handling Division. The place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on May 8, 2026, and responses are due by May 13, 2026. The North American Industry Classification System code for this work is 541611, which pertains to administrative management and general management consulting services. All work must be completed and reported in alignment with DoD standards, ensuring timely submission and accurate representation of compliance status.