NIST SP 800-171 Cybersecurity Compliance Assessment

The contract involves performing a comprehensive cybersecurity assessment to verify compliance with NIST SP 800-171 Rev 1, focusing on evaluating system controls designed to protect Controlled Unclassified Information (CUI). The scope includes developing a detailed System Security Plan (SSP) and ensuring the submission of assessment results to the Supplier Performance Risk System (SPRS) for review. This effort supports maintaining security standards as required by the Department of Defense. The subcontract is issued by the Electrical Devices Division of the Department of Defense and is intended to be carried out at a location in New Cumberland, with the postal code 17070-5002. The solicitation was posted on May 15, 2026, and responses are due by May 20, 2026. The work falls under the NAICS code 541611, which typically covers administrative management and general management consulting services. This task ensures adherence to critical cybersecurity protocols necessary for protecting sensitive information within defense contracting environments.