NIST SP 800-171 Cybersecurity Compliance Assessment and SSP Development

The contract requires the performance of a comprehensive cybersecurity assessment aligned with NIST SP 800-171 Rev 1 standards to evaluate the security posture of systems handling controlled unclassified information. The scope includes identifying gaps in current security controls, documenting findings, and developing a detailed System Security Plan that outlines how each requirement is met or addressed through compensating measures. The contractor must also prepare and submit a Supplier Performance Risk System response to demonstrate compliance with Department of Defense cybersecurity requirements. All work must be conducted at the New Cumberland facility with a zip code of 17070-5002, and the submission deadline is July 23, 2026. This is a subcontract under NAICS code 541611, issued by the Department of Defense through the DDSP New Cumberland Facility.