NIST SP 800-171 Cybersecurity Compliance Assessment & Reporting

The contract requires the execution of a comprehensive NIST SP 800-171 Rev 1 cybersecurity assessment to ensure full compliance with federal security standards for protecting controlled unclassified information within nonfederal systems. This includes developing a detailed System Security Plan that documents the implementation of all 110 required security controls, with the ultimate goal of achieving a perfect compliance score of 110. The assessment must be methodical and thorough, covering all technical, operational, and management controls outlined in the framework, and must be aligned with the Department of Defense’s expectations for supply chain security. Upon completion of the assessment and SSP development, the final deliverable is a summarized assessment report that must be submitted to the Department of Defense’s Supplier Performance Risk System. This submission is mandatory for contractual compliance and serves as a formal record of the contractor's cybersecurity posture. The work is to be performed under a subcontract arrangement with the Nuclear Reactor Program under the Department of Defense, with the place of performance listed as FPO ZIP 09520. Responses are due within three days of the posting date, indicating urgency in the timeline, and the NAICS code 541611 confirms the nature of the work as information technology consulting services.