NIST SP 800-171 Cybersecurity Compliance Assessment & Reporting

The contract requires the contractor to conduct a comprehensive self-assessment and documentation of compliance with NIST SP 800-171 standards for all systems handling Controlled Unclassified Information. This includes developing and submitting detailed system security plans, architectural descriptions of the IT environment, and clear implementation timelines outlining how security controls will be deployed and maintained. The contractor must also submit a current System Security Plan Rating System score to demonstrate the level of compliance achieved. All deliverables must align with Department of Defense requirements for protecting sensitive but unclassified data. The work is performed at a designated location in New Cumberland with a zip code of 17070-5002 and falls under NAICS code 541611 for management consulting services. The contract is structured as a subcontract, with a response deadline of May 22, 2026, and was posted on May 11, 2026. The solicitation is issued under the Land Supply Chain organization of the Department of Defense, and the contractor is expected to provide full transparency and accuracy in all documentation to meet federal cybersecurity standards. Failure to meet deadlines or submit complete, compliant materials may result in contract noncompliance and potential penalties.