NIST SP 800-171 Cybersecurity Compliance Assessment and SSP Development

The contract requires comprehensive cybersecurity compliance assessment services aligned with NIST Special Publication 800-171 for systems processing Controlled Unclassified Information, focusing on identifying gaps in current security controls, developing a detailed System Security Plan, and ensuring proper submission to the Department of Defense Supplier Performance Risk System. The work is scoped to support organizations handling CUI in accordance with federal mandates, with deliverables designed to meet DoD requirements for contractor cybersecurity posture. The solicitation is structured as a subcontract under the NAICS code 541611, with performance located at FPO, zip code 96666, and is issued by the Department of Defense under the Subsistence FSE Supply Chain organization. Respondents must submit proposals by the deadline of May 11, 2026, with no set-aside designation specified. All compliance activities must be executed to satisfy federal standards and enable successful DoD contractor authorization, with the ultimate goal of achieving and maintaining NIST SP 800-171 compliance through documented, actionable, and auditable security controls.