NIST SP 800-171 Compliance Assessment and System Security Plan Development

The contract requires a comprehensive evaluation of information systems to ensure full alignment with the National Institute of Standards and Technology Special Publication 800-171 security requirements, which are designed to protect controlled unclassified information in nonfederal systems. This assessment must identify gaps in current security controls, evaluate the effectiveness of existing safeguards, and document findings to support the development of a compliant System Security Plan. The resulting SSP must be thorough, accurately reflect the system’s environment, and address all 110 security controls outlined in NIST SP 800-171, including access control, audit and accountability, configuration management, and incident response. Upon completion of the assessment and plan development, the System Security Plan must be submitted to the Supplier Performance Risk System for official record and compliance validation. The work is classified as a subcontract under NAICS code 541611, indicating it involves administrative management and general management consulting services. The performance location is specified as New Cumberland, Pennsylvania with a zip code of 17070-5002, and the contracting entity is the ASC Commodities Division within the Department of Defense. The solicitation was posted on April 29, 2026, with responses due by May 4, 2026, indicating a tight turnaround timeframe requiring immediate attention to meet the deadline.