NIST SP 800-171 Compliance Assessment & System Security Plan (SSP) Development

The contract requires a comprehensive cybersecurity compliance assessment aligned with NIST Special Publication 800-171 Rev 1 for systems that process, store, or transmit Controlled Unclassified Information. This includes developing a detailed System Security Plan that documents the implementation of all required security controls, ensuring alignment with federal standards for protecting sensitive but unclassified data. The assessment must identify gaps in current security practices and outline corrective actions to achieve full compliance, with a final deliverable being the submission of assessment results to the Department of Defense Supplier Performance Risk System. The work is to be performed at Fort McCoy, Wisconsin, under a subcontract arrangement with the ASC Commodities Division of the Department of Defense. The task is governed by NAICS code 541611, indicating it falls under Management Consulting Services, reflecting the advisory and documentation nature of the engagement. All deliverables must be completed and submitted by May 18, 2026, following the posting of the solicitation on May 10, 2026. The contractor must possess the expertise to interpret and apply NIST SP 800-171 requirements accurately and generate documentation that meets DoD reporting standards for supply chain cybersecurity compliance.