NIST SP 800-171 Cybersecurity Compliance Assessment and SSP Development

The contract requires the execution of a NIST SP 800-171 cybersecurity compliance assessment and the development of a comprehensive System Security Plan to meet Department of Defense requirements. This includes a thorough evaluation of existing security controls, precise definition of system boundaries, and preparation of all necessary documentation for submission to the Supplier Performance Risk System. The work must align with federal cybersecurity standards and ensure the system is positioned for successful SPRS submission, reflecting full adherence to NIST guidelines. The scope demands technical expertise in DoD compliance frameworks and the ability to translate complex security requirements into actionable, documented policies and procedures. The contract is issued as a subcontract under the ASC Commodities Division of the Department of Defense, with performance required at Newport, Rhode Island, with zip code 02841-1703. It is classified under NAICS code 541611, indicating its focus on management consulting services related to cybersecurity. The solicitation was posted on May 11, 2026, with a response deadline of May 19, 2026, and is accessible through the DIBBS portal. All activities must be completed in accordance with federal cybersecurity mandates, emphasizing accuracy, timeliness, and alignment with DoD expectations for contractor systems handling controlled unclassified information.