NIST SP 800-171 Compliance Assessment and System Security Planning

The contract involves conducting comprehensive assessments to ensure compliance with the NIST SP 800-171 standards, specifically targeting the protection of controlled unclassified information. Key tasks include developing detailed System Security Plans (SSPs) that document the security requirements and controls of the information systems, performing thorough gap analyses to identify deficiencies relative to the NIST standards, and creating Plans of Action and Milestones (POA&Ms) to address any unresolved control issues. This work is critical for maintaining compliance and enhancing the cybersecurity posture of the Department of Defense supply chain operations. The subcontract, titled "NIST SP 800-171 Compliance Assessment and System Security Planning," is directed by the Department of Defense under the LAND SUPPLY CHAIN agency, with the place of performance located in New Cumberland, ZIP code 17070-5002. The solicitation was posted on May 13, 2026, and responses are due by May 26, 2026. The procurement falls under NAICS code 541611, which covers administrative management and general management consulting services. This opportunity provides a vital role in supporting the DoD’s efforts to safeguard sensitive information through regulatory compliance and strategic security planning.