NIST SP 800-171 Cybersecurity Assessment and System Security Plan Development

The contract involves performing a comprehensive compliance assessment against NIST SP 800-171 Rev 1 standards, focusing on ensuring that the client's cybersecurity practices meet federal requirements. This includes developing or updating the System Security Plan (SSP) to accurately reflect the organization's security controls and practices. Additionally, the contractor must prepare the Supplier Performance Risk System (SPRS) submission along with a Plan of Action and Milestones (POA&M) to demonstrate corrective measures and achieve a full compliance score. This subcontract opportunity, issued by the Department of Defense at the Defense Distribution Supply Point (DDSP) New Cumberland Facility, is identified under NAICS code 541611, which pertains to administrative management and general management consulting services. The response deadline for proposals is May 28, 2026, shortly after the posting date of May 22, 2026. The work is to be conducted at the New Cumberland location, with a zip code of 17070-5002, emphasizing the need for expertise in federal cybersecurity requirements to support defense supply chain security efforts.