NIST SP 800-171 Cybersecurity Assessment and Compliance Support

The contract requires the performance of a Medium or High NIST SP 800-171 cybersecurity assessment to evaluate compliance with federal security requirements for protecting controlled unclassified information. The selected vendor will be responsible for developing a comprehensive System Security Plan that outlines policies, procedures, and controls aligned with NIST guidelines. Additionally, the contractor must support the submission to the Supplier Performance Risk System by creating and maintaining a Plan of Action and Milestones that identifies gaps, defines corrective actions, and tracks progress toward full compliance. The work must be performed at the New Cumberland location with a ZIP code of 17070-5002 and falls under NAICS code 541611 for management, scientific, and technical consulting services. The opportunity is structured as a subcontract and responds to a solicitation with a tight window for submission, closing just three days after posting.