NIST SP 800-171 Cybersecurity Compliance Assessment & Reporting

The contract requires a comprehensive cybersecurity assessment aligned with NIST SP 800-171 Revision 1 to ensure compliance with federal standards for protecting controlled unclassified information. The scope includes developing a detailed System Security Plan that documents the organization’s security controls, identifying any gaps or deficiencies in current practices, and formulating a structured Plan of Action and Milestones to address those weaknesses. This documentation must be submitted to the Supplier Performance Risk System as mandated by DFARS 252.204-7012, ensuring transparency and accountability in security posture. The work is scoped as a subcontract under the Department of Defense, specifically for the New Cumberland facility, with a performance location in zip code 17070-5002. All deliverables must be completed and submitted by the response deadline of July 20, 2026, following the solicitation posted on July 15, 2026, under NAICS code 541611 for management consulting services.