NIST SP 800-171 Compliance Assessment and System Security Plan (SSP) Development

The contract requires the performance of a NIST SP 800-171 compliance assessment to evaluate an information system’s security posture against federal requirements for protecting controlled unclassified information. The scope includes identifying all security deficiencies, documenting gaps in current controls, and developing a comprehensive System Security Plan (SSP) that fully addresses each deficiency with remediation strategies and implementation timelines. The final SSP must be submitted to the Supplier Performance Risk System (SPRS) and include mandatory details such as the CAGE code, the exact date of the assessment, and the resulting compliance score to ensure audit readiness and regulatory adherence. This subcontract is issued under the Department of Defense’s C AND T SUPPLY CHAIN organization with a NAICS code of 541611 for computer systems design services. The solicitation was posted on May 10, 2026, and responses are due by May 21, 2026. The work must be performed at the designated place of performance in FPO, ZIP code 96669, and the deliverables are critical for maintaining DoD contract compliance. The contractor is responsible for ensuring all documentation meets SPRS submission standards and accurately reflects the assessed level of compliance to avoid contract penalties or disqualification.