NIST SP 800-171 Compliance Assessment and System Security Plan (SSP) Development

The contract requires the performance of comprehensive NIST SP 800-171 cybersecurity assessments to evaluate the security posture of information systems, determine compliance levels, and assign scores to system controls. It includes the development or revision of System Security Plans to align with NIST requirements, ensuring full adherence to the standardized framework for protecting controlled unclassified information. A critical component involves conducting detailed gap analyses to identify shortcomings in current security practices and formulating remediation plans to address each deficiency, ultimately leading to a fully compliant and robust security environment. This subcontract is issued under the NAICS code 541611 for administrative management and general management consulting services, tied to the Department of Defense’s Aviation Supply Chain initiative. The place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. All work must align with federal cybersecurity standards, and successful performance will directly contribute to securing defense-related information systems against evolving threats through systematic evaluation, documentation, and continuous improvement of security controls.