NIST SP 800-171 Compliance Implementation & System Security Planning

The contract requires full implementation of NIST SP 800-171 security controls to ensure compliance with Department of Defense requirements, focusing on protecting controlled unclassified information within covered systems. This includes performing comprehensive gap assessments to identify deficiencies against the NIST framework, executing targeted remediation efforts to resolve identified vulnerabilities, and developing a detailed System Security Plan that documents the security posture, control implementation strategies, and organizational responsibilities. Additionally, a Plan of Action and Milestones must be created to outline corrective actions, timelines, and resource allocation for unresolved gaps, ensuring a clear path to full compliance. Work is to be performed in San Diego, California, with an emphasis on delivering documented evidence of control adherence and continuous security improvement. The solicitation is structured as a subcontract under NAICS code 541612, indicating the work involves computer systems design and related services tailored to federal cybersecurity standards. The response deadline is August 6, 2026, and the effort is directly tied to supporting the Land Supply Chain organization within the Department of Defense, with performance expectations centered on technical accuracy, timely execution, and formal documentation to meet DoD audit and readiness requirements.