NIST SP 800-171 Cybersecurity Compliance Assessment and System Security Plan Development

A NIST SP 800-171 cybersecurity compliance assessment must be conducted with the goal of achieving a minimum score of 110, demonstrating adherence to federal security requirements for protecting controlled unclassified information. Alongside the assessment, a comprehensive System Security Plan must be developed to document the organization’s security controls, implementation status, and ongoing management practices. All findings, including any identified gaps and remediation plans, must be submitted to the Supplier Performance Risk System, with a Plan of Action and Milestones required if deficiencies are present. The work is under a subcontract tied to the Department of Defense and is performance-based at the New Cumberland location with a zip code of 17070-5002. The solicitation falls under NAICS code 541512 for computer systems design services and has a response deadline of May 13, 2026.