NIST SP 800-171 Compliance Assessment & System Security Plan (SSP) Development

This contract involves performing a cybersecurity compliance assessment in accordance with NIST SP 800-171 Revision 1 standards for systems that manage Controlled Unclassified Information (CUI). The work includes the development of a comprehensive System Security Plan (SSP) and requires submission of the assessment results to the Department of Defense's Supplier Performance Risk System (SPRS). The goal is to ensure that the contractor’s systems align with federal cybersecurity requirements designed to protect sensitive defense information. The contract is categorized as a subcontract and falls under the NAICS code 541611, which relates to administrative management and general management consulting services. The work will be performed at Fort McCoy with a response deadline set for May 18, 2026, following the posting date of May 10, 2026. The contracting agency is the Department of Defense, specifically the ASC Commodities Division, and details can be accessed through the provided DIBBS link. This effort is critical for maintaining compliance with DoD cybersecurity regulations and supporting secure handling of CUI.