NIST SP 800-171 Compliance Assessment and System Security Plan (SSP) Development

The contract entails conducting a thorough gap analysis and compliance assessment based on NIST SP 800-171 standards, focusing on controlled unclassified information (CUI) handling systems. The work includes evaluating the current security posture against federal requirements and identifying any deficiencies or vulnerabilities. Following the assessment, the contractor is responsible for developing a detailed System Security Plan (SSP) that documents the implemented security controls, architecture, and procedures designed to protect CUI within the system. This subcontract opportunity, posted by the Department of Defense's Strategic Acquisition Program Directorate, falls under the NAICS code 541611, which corresponds to administrative management and general management consulting services. The solicitation was made available on May 8, 2026, with responses due by May 13, 2026. Although specific location and contact details are not provided, interested parties can access further information through the Department of Defense's contracting portal. The contract aims to support compliance with federal cybersecurity regulations and enhance the overall security framework for sensitive defense-related systems.