NIST SP 800-171 Cybersecurity Compliance Assessment and System Security Plan Development

The contract involves performing a NIST SP 800-171 cybersecurity compliance assessment with a required minimum score of 110, ensuring the organization's adherence to federal cybersecurity standards. Following the assessment, the contractor is responsible for developing a comprehensive System Security Plan (SSP) that outlines current security measures and any necessary improvements. Additionally, the contractor must submit the assessment results to the Supplier Performance Risk System (SPRS) and prepare a Plan of Action and Milestones (POA&M) if any deficiencies are identified during the evaluation. This subcontract is issued by the Department of Defense for the DDSP New Cumberland Facility, with the primary place of performance located in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on May 8, 2026, with a response deadline of May 13, 2026. The contract falls under NAICS code 541512, which relates to computer systems design services. The contractor's scope includes ensuring compliance documentation is complete and submitted on time, contributing to the facility's overall cybersecurity posture.