NIST SP 800-171 Cybersecurity Compliance

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 Rev 1 standards to ensure the protection of controlled unclassified information within the Department of Defense’s supply chain. The contractor must conduct regular self-assessments of their cybersecurity controls, accurately document findings, and report summary scores to the DoD Supplier Performance Risk System. These activities must be performed continuously to maintain compliance and demonstrate readiness for audits or evaluations by DoD entities. The place of performance is specified as New Cumberland, Pennsylvania, with a zip code of 17070-5002, indicating the physical or operational location where the cybersecurity practices will be implemented and monitored. This is a subcontract issued under the NAICS code 541611, which corresponds to management, scientific, and technical consulting services, and is tied to the Land Supply Chain division of the Department of Defense. The solicitation was posted on May 11, 2026, with a response deadline of May 22, 2026, leaving a narrow window for proposals to be submitted. The contract focuses exclusively on cybersecurity compliance activities and does not include set-aside provisions for small businesses or other categories. The required deliverables center around documentation, assessment rigor, and timely reporting through the SPRS system, making adherence to NIST guidelines not optional but a core contractual obligation throughout the contract’s lifecycle.