NIST SP 800-171 Compliance Assessment & System Security Plan (SSP) Development

The contract requires the performance of a comprehensive NIST SP 800-171 compliance assessment to evaluate the security controls in place for handling controlled unclassified information within a DoD system. This includes identifying gaps in current security practices against the specified requirements, analyzing areas of non-compliance, and providing detailed recommendations for remediation. The successful contractor will be responsible for either developing a new System Security Plan or updating an existing one to align fully with NIST SP 800-171 standards, ensuring all controls are accurately documented and implemented. The finalized System Security Plan must be prepared for submission to the Department of Defense’s Supplier Performance Risk System, meeting all formatting, technical, and procedural requirements for acceptance. The work is to be performed at a specified location in San Diego with a zip code of 92136-3581 and is structured as a subcontract under a NAICS code of 541611. Proposals must be submitted by May 20, 2026, with the solicitation posted on May 12, 2026, and the responsible agency is the Department of Defense under the ASC SUPPLIER OPER OEM DIVISION.