NIST SP 800-171 Compliance Assessment and System Security Plan (SSP) Development

The contract requires the execution of comprehensive cybersecurity assessments to ensure compliance with NIST SP 800-171 Revision 1 standards for Department of Defense systems that process, store, or transmit Controlled Unclassified Information. Key deliverables include the development and ongoing maintenance of System Security Plans that document security controls, risk mitigation strategies, and operational procedures aligned with NIST requirements. All compliance status must be accurately reported through the Supplier Performance Risk System to maintain visibility and accountability across the DoD supply chain. Work is performance-based and focused on achieving and sustaining adherence to federal cybersecurity standards for systems located in Jacksonville, Florida, under the oversight of the Land Supply Chain organization within the Department of Defense. The effort is structured as a subcontract and is subject to the NAICS code 541611, indicating a focus on scientific and technical consulting services. Proposals must be submitted by the specified deadline to be considered for award.