NIST SP 800-171 Cybersecurity Compliance Assessment and SPRS Submission

The contract requires comprehensive cybersecurity assessments for Department of Defense contractors to verify adherence to NIST SP 800-171 Revision 1 standards, encompassing full system evaluations, creation and refinement of System Security Plans, and accurate scoring of compliance posture. The work involves submitting detailed assessment results directly to the Supplier Performance Risk System to ensure visibility and accountability across the defense supply chain. Contractors must identify gaps in security controls and develop structured Plans of Action & Milestones to guide remediation efforts, ensuring timely correction of identified deficiencies and continuous alignment with federal cybersecurity requirements. All activities are centered on securing controlled unclassified information within contractor environments and must be executed with precision to meet DoD mandates. Performance will be conducted at the New Cumberland location with a zip code of 17070-5002, and the work is classified as a subcontract under NAICS code 541611, indicating it falls within the scope of management, scientific, and technical consulting services. The solicitation was posted on July 27, 2026, with a rigid response deadline of July 30, 2026, reflecting a time-sensitive procurement environment. The agency responsible is the Department of Defense, specifically the DDSP New Cumberland Facility, and the contract requires expertise in both technical cybersecurity assessment and administrative compliance documentation, with no set-aside provisions indicated. All deliverables must meet exacting standards for accuracy, completeness, and timeliness to support the broader objective of securing the DoD’s industrial base.