NIST SP 800-171 Cybersecurity Compliance Assessment and SSP Development

The contract requires performing a detailed NIST SP 800-171 Rev 1 cybersecurity compliance assessment to evaluate the current security posture of a system handling controlled unclassified information. This includes identifying gaps in implemented security controls, documenting the system architecture comprehensively, and developing a complete System Security Plan that aligns with the requirements of DFARS 252.204-7012 and 7020. The outcome must be submitted to the Supplier Performance Risk System to demonstrate compliance with Department of Defense cybersecurity standards. The work is scoped as a subcontract under the NAICS code 541611, with performance based in New Cumberland, Pennsylvania, and a response deadline of May 20, 2026. The solicitation is issued by the ASC Supplier Oper OEM Division under the Department of Defense, emphasizing the need for rigorous adherence to federal cybersecurity protocols for contractors handling sensitive government information.