NIST SP 800-171 Cybersecurity Compliance Assessment & SSP Development

The contract requires a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 security controls, focusing on evaluating existing systems against the required standards for protecting controlled unclassified information. The work includes developing a complete System Security Plan that documents the organizational structure, security policies, and technical controls in place, along with performing a detailed gap analysis to identify areas where current practices fall short of compliance requirements. A Plan of Actions and Milestones will be created to outline corrective steps, timelines, and responsible parties for addressing each identified deficiency, ensuring a structured path toward full compliance. The assessment must also ensure alignment with Defense Federal Acquisition Regulation Supplement requirements and the Department of Defense’s expectations for contractor cybersecurity posture. Completion involves submitting a formal compliance score through the Supplier Performance Risk System, which serves as the official metric for evaluating readiness. The effort is tied to a specific geographic performance location in Jacksonville with a ZIP code of 32212-0103, and the solicitation is structured as a subcontract under the NAICS code 541611, indicating it falls under management, scientific, and technical consulting services. The response deadline is May 20, 2026, with the solicitation posted on May 12, 2026, offering a limited window for qualified participants to submit proposals.