NIST SP 800-171 Compliance Assessment and System Security Planning

The contract requires comprehensive assessments to ensure compliance with NIST SP 800-171 standards, focusing on the development of System Security Plans, identification of security control gaps, and the creation of Plans of Action and Milestones to address outstanding requirements. Work must be performed at the specified location in New Cumberland, Pennsylvania, with a delivery date of 17070-5002, and all deliverables must align with Department of Defense requirements for protecting controlled unclassified information. The effort is structured as a subcontract under NAICS code 541611, targeting organizations with expertise in cybersecurity compliance and documentation for federal systems. Proposals are due by May 26, 2026, and while no set-aside classification is specified, the solicitation is open to qualified subcontractors capable of delivering accurate, thorough, and actionable security documentation. The work involves close alignment with existing DoD security frameworks and demands precision in mapping current controls to NIST SP 800-171 requirements, documenting deficiencies, and establishing realistic remediation timelines. All tasks must support the agency’s objective of maintaining continuous compliance and reducing cybersecurity risk across its supply chain infrastructure.