NIST SP 800-171 Compliance Assessment & System Security Plan (SSP) Development

The contract requires a complete evaluation of existing IT systems to determine adherence to the security controls outlined in NIST SP 800-171 Rev 1, with the goal of identifying any deficiencies or gaps in current security practices. This assessment must be thorough, covering all relevant technical and operational safeguards, and must result in a detailed System Security Plan that accurately documents the current security posture and outlines corrective actions necessary to achieve full compliance. The final deliverable is a compliant SSP formatted and submitted to the Supplier Performance Risk System for official review and acceptance. The work is structured as a subcontract under the Department of Defense, specifically for the Medical Supply Chain MD Surg FSF, with a NAICS code of 541611 indicating it falls under management consulting services. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026, indicating a tight turnaround for proposal submission. The place of performance is unspecified, and no set-aside status is indicated, so any qualified vendor may respond. The contract demands expertise in federal cybersecurity standards, experience with NIST frameworks, and familiarity with SPRS submission requirements to ensure successful compliance certification.