NIST SP 800-171 Cybersecurity Compliance Assessment & SSP Development

The contract requires comprehensive cybersecurity compliance services aligned with NIST SP 800-171 Rev 1, including a full assessment of current systems, development of a System Security Plan, and submission of the Supplier Performance Risk System score to demonstrate compliance posture. The objective is to achieve full compliance with all 110 required security controls, and a detailed remediation plan must be provided to address any gaps identified during the assessment. The scope also mandates adherence to cyber incident reporting protocols and the flow-down of all applicable NIST requirements to any subcontractors involved in the project. Work is to be performed at the designated location in New Cumberland, Pennsylvania, with a response deadline set for May 21, 2026. This subcontract is issued under the Department of Defense and falls under NAICS code 541611 for management consulting services.