NIST SP 800-171 Compliance Assessment & System Security Plan Development

This contract involves performing a comprehensive self-assessment to evaluate compliance with the NIST SP 800-171 Rev 1 security requirements. The contractor is responsible for developing or updating the System Security Plan (SSP), which includes conducting a gap analysis to identify any deficiencies in current security practices relative to the required standards. Additionally, the contractor must prepare formal documentation suitable for submission to the Supplier Performance Risk System (SPRS), ensuring all reporting aligns with DoD requirements. The work is designated as a subcontract under NAICS code 541611 and is overseen by the Department of Defense's ASC Commodities Division. The place of performance is in Tracy, CA, and responses to the solicitation are due by May 19, 2026. The contract focuses on strengthening cybersecurity posture in alignment with federal standards critical for safeguarding controlled unclassified information.