NIST SP 800-171 Compliance Assessment and System Security Plan (SSP) Development

This contract requires conducting cybersecurity assessments to ensure compliance with NIST SP 800-171 Rev 1 for Department of Defense (DoD) systems that handle Controlled Unclassified Information (CUI). It involves developing and maintaining detailed System Security Plans (SSPs) that document the security posture and implementation of required controls, as well as reporting compliance status through the Supplier Performance Risk System (SPRS). The effort supports the DoD's goal of safeguarding sensitive information within its supply chain. The contract is a subcontract opportunity posted on May 11, 2026, with a response deadline of May 22, 2026. The place of performance is Jacksonville, zip code 32212-0103, and it falls under NAICS code 541611, which pertains to administrative management and general management consulting services. The contracting agency is the Department of Defense’s Land Supply Chain office. This task is critical for maintaining the integrity and security of DoD systems and ensuring adherence to federal cybersecurity standards.