NIST SP 800-171 Compliance Assessment and System Security Plan (SSP) Development

The contract involves supporting the prime contractor in achieving full compliance with NIST SP 800-171 Rev 1 standards for handling Controlled Unclassified Information (CUI). Key tasks include conducting a comprehensive gap analysis to identify areas that require improvement, developing a detailed System Security Plan (SSP), implementing necessary security controls, and preparing and submitting the Security Performance Risk System (SPRS) documentation. This work ensures that the contractor's information systems meet federal requirements for protecting sensitive but unclassified data. Scheduled as a subcontract with a solicitation posting date of May 15, 2026, and a response deadline of May 20, 2026, the contract falls under NAICS code 541612, which pertains to human resources and executive search consulting services, reflecting the specialized nature of compliance consulting. The Department of Defense, through the DDSP New Cumberland Facility located in New Cumberland, PA 17070-5002, is the agency seeking these services. The contract emphasizes close collaboration with the prime contractor to meet regulatory expectations within the designated timeframe.