NIST SP 800-171 Compliance Implementation & System Security Plan (SSP) Development

The contract involves developing and implementing a comprehensive System Security Plan (SSP) in compliance with the NIST SP 800-171 Rev. 1 standard. The scope includes conducting a thorough gap analysis to identify security weaknesses, developing relevant policies, establishing technical controls to enhance system security, and completing the necessary submission to the Supplier Performance Risk System (SPRS). This effort aims to ensure that the contractor's information systems meet federal cybersecurity requirements, particularly those mandated by the Department of Defense for handling controlled unclassified information. Issued by the ASC Supplier OEM Division of the Department of Defense, the subcontract opportunity was posted on May 10, 2026, with responses due by May 18, 2026. The work will be performed in New Cumberland, ZIP code 17070-5002, under NAICS code 541512, which pertains to computer systems design services. This contract is focused on supporting DoD compliance initiatives by strengthening cybersecurity posture through structured planning and implementation of security controls aligned with established federal guidelines.