NIST SP 800-171 Cybersecurity Assessment and System Security Plan (SSP) Development

The contract requires the execution of a NIST SP 800-171 cybersecurity assessment to evaluate an information system’s alignment with federal security requirements for protecting controlled unclassified information. The scope includes implementing necessary security controls to achieve compliance, developing a comprehensive System Security Plan that documents the system’s architecture, control implementation, and risk management strategies, and producing a final compliance score that reflects the level of adherence to NIST standards. All deliverables must support Department of Defense compliance objectives and include a detailed architecture description to illustrate how security controls are integrated into the system’s design and operations. The effort culminates in the submission of the completed documentation to the Supplier Performance Risk System, ensuring the contractor’s compliance posture is officially recorded within the DoD’s procurement ecosystem. The work is assigned under a subcontract with a NAICS code of 541611, indicating it falls under management, scientific, and technical consulting services. Performance is to be conducted at Tobyhanna, Pennsylvania, with a response deadline of April 30, 2026, and the solicitation was published on April 22, 2026. The contracting office is the ASC Supplier Oper OEM Division, under the Department of Defense, and the task is directed toward achieving full cybersecurity alignment with DoD mandates through rigorous documentation, control validation, and formal reporting.