NIST SP 800-171 Compliance Assessment and System Security Plan (SSP) Development

The contract requires the development and implementation of a System Security Plan aligned with NIST SP 800-171 Rev 1 standards, ensuring all required security controls are properly documented and operational within the system environment. This includes a comprehensive assessment of DoD compliance criteria, evaluating the effectiveness of implemented controls against the framework’s requirements, and preparing full documentation to support each control. The deliverables must include a complete, audit-ready SSP and detailed evidence demonstrating adherence to the standard, with all findings and remediation actions formally recorded. Final output must be submitted to the Supplier Performance Risk System (SPRS) to verify compliance status and update the official DoD contractor security record. The work is to be performed at New Cumberland, Pennsylvania, under a subcontract structure with a submission deadline of May 20, 2026, and the NAICS code 541611 indicates this involves scientific and technical consulting services. The contracting entity is the Department of Defense’s ASC Supplier Oper OEM Division, underscoring the critical nature of the work in supporting secure defense infrastructure and supply chain requirements.