NIST SP 800-171 Compliance Assessment and System Security Planning

The contract requires a formal evaluation of information systems to ensure compliance with the NIST SP 800-171 Rev 1 security controls, focusing on identifying gaps and weaknesses in current security practices. This assessment must be thorough, documenting any deficiencies that prevent full alignment with the standard, and must result in a comprehensive System Security Plan that outlines corrective actions and mitigation strategies. The SSP is intended for submission to the Supplier Performance Risk System, making accurate reporting and adherence to federal cybersecurity requirements critical for contract fulfillment. Work under this subcontract is to be performed at the specified location in New Cumberland, Pennsylvania, with a tight turnaround time, as proposals must be submitted by May 19, 2026. The work falls under NAICS code 541611, indicating it is related to management consulting services, specifically those involving cybersecurity and information systems. The contracting entity is the ASC Commodities Division under the Department of Defense, underscoring the importance of maintaining the integrity and security of defense-related information systems. The successful vendor must demonstrate expertise in NIST frameworks and experience with government compliance processes to meet the stringent requirements of this engagement.